Advisory Researcher, Hybrid Cloud Security

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #196 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.

Please note that the team has moved to a new location. The office is now at 121 Menachem Begin Road, Tel Aviv, 61st floor, in the POINT office complex. As per our office policy, you will be required to visit the site at least three times a week.

Lenovo Digital Trust Lab is hiring an Advisory Researcher, Hybrid Cloud Security to join our Hybrid Cloud team and design and implement the security services that protect modern hybrid environments. You will own the technical design and delivery of security solutions across hybrid cloud, AI workloads, and sovereign cloud — building production-grade services that secure infrastructure spanning on-prem data centers, public cloud, and SaaS.

Job Responsibilities

• Design and implement security services for hybrid cloud environments — covering identity and access, workload and container security, key and secrets management, and control-plane hardening across on-prem, public cloud, and SaaS.
• Build security solutions for cloud AI agents and AI workloads — securing AI agents in the cloud, model training and inference pipelines, and the data that flows through them.
• Design security architectures for sovereign cloud — data residency, isolation, encryption, and access controls that meet regulatory, compliance, and national-sovereignty requirements.
• Own security services end-to-end — from architecture and design, through implementation, deployment, and continuous improvement.
• Define reference architectures, secure-by-default patterns, and shared infrastructure that other engineers across the team build on.
• Translate hybrid cloud and sovereign cloud security requirements into concrete, implementable designs.
• Set the technical bar for security service quality, reliability, and operability, and mentor engineers through design reviews and pairing.
• Stay ahead of the field — track cloud-provider security changes, sovereign cloud and AI-workload security developments, and emerging techniques — and turn what is relevant into concrete bets for the team.
  
  

• BSc in Computer Science or equivalent practical experience, with 5+ years of software development experience building and operating production systems and demonstrated ownership of security or infrastructure services.
• Deep expertise in hybrid cloud security across AWS, Azure, GCP, and on-premises environments, including identity and access management, workload and container security, control-plane hardening, infrastructure-as-code, CI/CD security, and secrets management.
• Experience designing and implementing security services, reference architectures, and secure-by-default patterns for distributed, multi-environment systems.
• Strong threat-modeling capabilities, including analysis of attack paths, exposure chains, lateral movement, business-logic flaws, and security risks across hybrid environments.
• Familiarity with cloud security tooling and controls (CSPM/CNAPP, IAM, KMS/HSM, policy-as-code), industry security frameworks, Kubernetes and container security, service meshes, and zero-trust network design.
• Working knowledge of AI workload and AI agent security, including model training and inference infrastructure, data and model supply-chain security, and AI compute isolation.
• Knowledge of sovereign cloud requirements and related compliance frameworks, including data residency, isolation, encryption, GDPR, and regional data-sovereignty regulations.
• Strong software engineering fundamentals, including production-quality Python and one other programming language, distributed systems, APIs, and data pipelines; hands-on experience building AI agents and using AI coding agents; knowledge of hybrid cloud technologies; and cloud security certifications (e.g., AWS/Azure/GCP Security Specialties, CKS) and/or an advanced degree (M.Sc. or Ph.D.) are a plus.
  
  

• Health Disability Insurance
• Pension/ Retirement Plan
• Meal Vouchers
• Employee Referral Bonus
• Children of Lenovo Employees Scholarship Program
• Lenovo and Motorola Product Discounts
• Employee Assistance Program, e.g., for health, legal financial consultancy
• Internal E-learning Development Platform Available for Employees