DevOps Engineer

Company overview:

Cellebrite’s (Nasdaq: CLBT) mission is to enable its customers to protect and save lives, accelerate justice, and preserve privacy in communities around the world. Cellebrite is a global leader in Digital Intelligence solutions for the public and private sectors, empowering organizations to master the complexities of legally sanctioned digital investigations by streamlining intelligence processes. Trusted by thousands of leading agencies and companies globally , Cellebrite’s Digital Intelligence platform and solutions transform how customers collect, review, analyze, and manage investigative digital data in legally sanctioned investigations.

Responsibilities:

• Collaborate with cross-functional teams to integrate security practices into the entire software development lifecycle.
• Automate security testing, vulnerability scanning, and compliance checks into the continuous integration and continuous deployment (CI/CD) pipeline.
• Design and implement security controls and compliance measures for cloud infrastructure and applications.
• Stay up-to-date with the latest security threats, technologies, and best practices, and ensure the team is informed about relevant developments.
• Develop and maintain documentation related to security policies, procedures, and best practices.
• Evaluate and recommend security tools and technologies to enhance the organization's security posture.
• Participate in security audits and compliance assessments as required.
• Keeping up-to-date on the latest security threats and best practices
• Monitor and respond to security incidents, conduct root cause analysis, and implement corrective actions.
• Create POC for a new tool.

Requirements:

• Solid understanding of DevOps principles and practices, including CI/CD pipelines.
• 3+ years of experience in software development, security and DevOps.
• Proficiency in scripting and automation (e.g., Python, Bash, PowerShell) to facilitate security tasks.
• Strong knowledge of cloud platforms and specifically AWS, and their security controls.
• Familiarity with containerization and orchestration technologies (e.g., Docker, Kubernetes) and their security implications.
• Experience with security testing tools and methodologies, such as static analysis, dynamic analysis, and penetration testing.
• Knowledge of security frameworks and standards (e.g., OWASP, NIST, CIS).
• Excellent communication skills to collaborate effectively with technical and non-technical stakeholders.
• Relevant security certifications (e.g., CISSP, CEH, CompTIA Security+) are a plus.
• Experience with compliance standards (e.g., GDPR, HIPAA, PCI DSS) is desirable.
• Ability to work in an agile and fast-paced environment, adapting to changing priorities.
• Bachelor's degree in computer science, engineering, or a related field
• Strong understanding of security principles and best practices
• Excellent problem-solving, communication and teamwork skills