Security DevOps Engineer

At JFrog, we’re reinventing DevOps to help the world’s greatest companies innovate -- and security is a core part of our mission. Our team of industry-leading software security experts are true pioneers, constantly pushing the boundaries with original research and technology innovation. JFrog is a special place with a unique combination of brilliance, spirit and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production -- a concept we call “liquid software.” Wouldn't it be amazing if you could join us in our journey?

JFrog Security is one of the main pillars of the JFrog offering and long-term strategy. We are pushing the boundaries of security analysis of both binaries and code, shifting left and bringing new and exciting features to both developers and DevOps. We are looking for a Security DevOps Engineer to join the team. As a researcher, you will perform security research on open and closed-source projects, both in web technologies and low-level technologies. Define how to identify exploitable security issues in an automated manner and develop code for that purpose.

As a Security DevOps Engineer in JFrog you will...

• Construct a benchmark suite of tools and images for JFrog security tooling
• Research differences and drift between JFrog security tooling and known industry benchmarks
• Build & lead internal alpha testing processes of JFrog security tooling
• Write technical reports regarding all research subjects mentioned above
  
  

• 3+ years of backend Python programming experience
• 3+ years of DevOps experience
• Knowledge of software security terminology, esp. supply chain security