Senior Security Engineer - Cloud Team

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.

Candidate must be willing to work onsite in our Tel-Aviv, Israel office.

Lenovo’s Enterprise AI team is hiring a Senior Security Engineer to design and implement the security services that protect Enterprise AI across modern hybrid environments - securing AI workloads and agents deployed across on-prem datacenters, public cloud, and SaaS. Our current focus is AI sovereignty and governance in Lenovo hybrid cloud.

You will own the technical design and delivery of security solutions across hybrid cloud, AI workloads, and sovereign cloud - building production-grade services that secure AI running on infrastructure spanning on-prem datacenters, public cloud, and SaaS.

Job Responsibilities

• Own the security architecture of the platform end to end, from design through implementation, deployment, and continuous improvement.
• Design and implement security services for hybrid cloud environments: identity and access, workload and container security, key and secrets management, and control-plane hardening across on-prem, public cloud, and SaaS.
• Design the security architecture for sovereign cloud: data residency, isolation, encryption, and access controls that meet regulatory, compliance, and national-sovereignty requirements.
• Build the security layer for AI workloads and agents, covering inference and serving pipelines, agent runtimes, and the data that flows through them.
• Define reference architectures, secure-by-default patterns, and shared infrastructure that engineers across the team build on.
• Threat model the platform and the paths AI workloads run through, and drive the findings into design and implementation.
• Translate hybrid and sovereign cloud security requirements into concrete, implementable designs.
• Set the technical bar for quality, reliability, and operability, and mentor engineers through design reviews and pairing.
• Track cloud-provider security changes and developments in sovereign cloud and AI-workload security, and turn what matters into concrete bets for the team.
  
  

• BSc in Computer Science, or equivalent practical experience.
• 5+ years in security engineering, product security, or application security, with real ownership of systems in production.
• Core security engineering depth: identity and access, cryptography and key management, secrets handling, workload isolation, and secure-by-default design.
• Familiarity with AI security - how AI systems get attacked and where their weak points are: prompt and tool injection, data-pipeline abuse, agent failure modes.
• Using AI coding agents in your day-to-day work.
  
  

• Hands-on experience securing AI workloads, agents, inference endpoints, or the data pipelines behind them.
• Work in sovereign or regulated environments, where data residency and isolation matter.
• Security or AI governance frameworks such as ISO/IEC 42001, the NIST AI Risk Management Framework, or the EU AI Act. Policy-as-code and compliance automation count here too.
• MSc or PhD in Computer Science or Cybersecurity.
• Cloud security in practice: depth in at least one major cloud (AWS, Azure, or GCP), and a sense of how the controls translate elsewhere.
  
  

• Opportunities for career advancement and personal growth
• Access to a diverse range of training programs to sharpen your skills
• Performance-based rewards that celebrate your achievements
• Enjoy the best of both worlds with our hybrid setup: 3 days connecting with the team in the office and 2 days working from the comfort of your home