DevSecOps Engineer (AI-Driven Security)

Company Description

Wix makes it possible for anyone to succeed online. Since 2006, we’ve grown to around 5,300 employees in 22 countries, launched over 40 products, and serve over 299 million users and their visitors worldwide. At Wix, we push you to innovate and evolve in non-traditional ways. We operate in collaborative, high-performing teams, building cutting-edge products and leveraging AI to redefine how our users create, manage and grow their dreams online.

Although we’re already industry leaders in web creation and business, our work is nowhere near done. Our goal is to become the main engine of the Internet so we can create a more open web for all.

We're proud to be an equal opportunity employer. Wix was built around the idea that everyone has the right to be successful, online. This same vision defines us as an employer: creating a work environment where everyone is welcome, and anyone has the right to succeed.

Join Wix’s Internal Platform Engineering team! We are looking for a Security Engineer with a strong DevOps mindset and a passion for the future of technology. In this role, you will be at the forefront of designing, building, and securing our high-scale cloud infrastructure, ensuring that security is seamlessly integrated into our CI/CD pipelines and engineering culture. 

As part of our evolution, you will also play a key role in AI-driven security—leveraging AI tools to automate threat detection, optimizing security operations, and ensuring the secure deployment of AI/LLM-based applications across the company. 

In your day-to-day, you will:

• Drive Security & DevOps Integration: Bring a security-first approach into a DevOps culture, ensuring that infrastructure and deployment pipelines are secure by design. 
• Automate Infrastructure: Support the efficient delivery of services by employing industry best practices for the automated build, deployment, and monitoring of security infrastructure and code.
• Implement AI & Smart Security: Pioneer the adoption of AI-driven security tools to automate incident response, vulnerability management, and threat intelligence.
• Cloud & Transformation: Support Cloud Technology deployments, lift-and-shift migrations, and transformation of Cloud solutions that manage hybrid and on-premises infrastructure.
• Collaborate & Consult: Partner with Product and R&D teams to evaluate planned changes, review architecture blueprints, minimize risks, and architect secure distributed systems.
• SecOps Excellence: Manage and optimize modern cybersecurity solutions (SIEM, EDR, Firewalls) and application security frameworks.

• 3+ years of experience working in a large enterprise environment with a solid grasp of SecOps/DevSecOps and secure system design.
• DevOps Mindset & Foundations: Strong hands-on experience with networking foundations (TCP/IP, DNS, Load-balancers, routing), configuration management, and version control (Git).
• AppSec & Identity: Deep knowledge of web application vulnerabilities, authentication/authorization protocols (OAuth, SAML), secret management, PKI, and SSL/TLS.
• Security Stack: Proven experience with cybersecurity solutions like SIEM, EDR,Email Security, Endpoint protection, and Vulnerability scanning. 
• Identity Management: Hands-on experience with SSO solutions (Keycloak, Okta, Google SAML, Azure Auth).
• Communication: Excellent interpersonal and communication skills in both English and Hebrew.

An advantage if you have:

• AI Security Enthusiast: Experience or strong understanding of securing AI/LLM pipelines, OWASP Top 10 for LLMs, or utilizing AI tools for automated security operations.
• Cloud & Containers: Experience with at least one major cloud platform (AWS, GCP, or Azure) and container-based technologies (Docker, Kubernetes).
• Infrastructure as Code (IaC): Experience with automation tools like Terraform, Ansible, or equivalent.
• Source Control & Frameworks: An understanding of the management of different software version control repositories, specifically Git and development frameworks.
• Governance: Experience in writing Security procedures, policies, and compliance frameworks.

We’re Wix’s Internal Platform Engineering team. We’re an innovative, dynamic team who are focused on security and available, scalable, and performant microservices. We use cutting-edge technologies such as OPA, Terraform, Kubernetes, Istio, and Argo to solve complex problems related to distributed systems. We’re responsible for shaping the architecture of our backend microservices with a focus on complexity and security.

The DevSecOps team defines the system architecture of Wix, developing and innovating enterprise solutions to fit our needs. We design cloud network and security standards and maintain our global infrastructure. We’re also responsible for the design, development, and operation of security services and components across Wix.