# DevSecOps Engineer

[Honeycombinsurance](https://gurify.com/jobs?q=Honeycombinsurance) · Tel Aviv, Israel · Posted 2 days ago

[Apply on the original posting → (opens in a new tab)](https://job-boards.greenhouse.io/honeycombinsurance/jobs/4738817005)

## Job description

### Honeycomb Insurance

At Honeycomb, we're not just building technology; we’re reshaping the future of insurance.

In 2025, Honeycomb was recognized by Dun & Bradstreet as “Top 10 Best Start Up Companies to Work For” in Israel, named by LinkedIn as “Top 10 Startups in Chicago”, and Newsweek’s "Greatest Startup Workplaces in America, 2025". Through the first half of 2026 we’ve been recognized on Inc. Magazine’s "Best Workplaces" List and Forbes "Fintech 50".

How did we earn these honors?

Honeycomb is a rapidly growing global startup, generously backed by top-tier investors and powered by an exceptional team of thinkers, builders, and problem-solvers. Dual-headquartered in Chicago and Tel Aviv (R&D center), and with 6 offices across the U.S., we are reinventing the commercial real estate insurance industry, an industry long overdue for disruption. Just as importantly, we ensure every employee feels deeply connected to our mission and one another.

With over $100B in insured assets, Honeycomb operates across 23 states, covering more than 65% of the U.S. population and increasing its coverage.

If you’re looking for a place where innovation is celebrated, culture actually means something, and smart people challenge you to be better every day - Honeycomb might be exactly what you’ve been looking for.

About the Role We are looking for a hands-on DevSecOps Engineer to strengthen the security of Honeycomb's cloud-native
environment, working closely with our Security, Engineering, DevOps, and AI teams. The role centers on Google
Cloud Platform (GCP), Kubernetes, vulnerability management, container and CI/CD security, cloud security
posture, and AI security. You will identify and remediate security risks across our infrastructure, applications,
pipelines, and AI environments, while building automation and controls that let our teams move quickly and
securely.

### Responsibilities

● Identify, prioritize, and drive remediation of security vulnerabilities (CVEs) across container images,
application dependencies, Kubernetes workloads, and GCP infrastructure, in partnership with
Engineering, DevOps, and AI teams.
● Secure our GCP and Kubernetes environments: IAM, networking, logging, cluster and workload
hardening, RBAC, secrets, and network policies.
● Own container security practices, including image scanning, base image management, secrets
management, and runtime security.
● Operate SAST, SCA, and CSPM tools to surface code, dependency, and cloud misconfiguration risks, and
help teams remediate findings.
● Partner with the AI team to secure AI applications, models, agents, APIs, and development
environments, including access controls, data protection, and monitoring of both internal and third-
party AI tools.
● Implement automated security gates and policy enforcement throughout CI/CD pipelines and the SDLC,
without slowing development.
● Establish and improve vulnerability management processes: risk-based prioritization, remediation SLAs,
exception management, and reporting.
● Automate security and operational tasks with Bash, Python, or similar.
● Support security monitoring and incident response across cloud infrastructure, applications, and AI
workloads.
● Promote DevSecOps best practices and help build a security-first engineering culture.

Requirements
● Proven experience as a DevSecOps Engineer, or DevOps Engineer with a strong security focus.
● Hands-on experience with GCP security and running Kubernetes in production.

● Hands-on experience managing CVEs, vulnerability remediation, patching, and risk-based prioritization.
● Strong Linux skills, including hardening, troubleshooting, networking, and logs.
● Experience with container security and CI/CD security, including integrating scanning and controls into
pipelines.
● Experience with SAST/SCA tools (e.g., Semgrep, Snyk, SonarQube) and CSPM platforms (e.g., Wiz, Prisma
Cloud, CrowdStrike Falcon Cloud Security).
● Solid scripting in Bash and/or Python.
● Ability to work hands-on with engineering and AI/ML teams to investigate and remediate security issues.
● Fluent English, written and verbal.

Advantages
● Experience securing GKE at scale, including Google Cloud IAM, Workload Identity, and VPC networking.
● Infrastructure as Code and GitOps tools such as Terraform, Helm, or ArgoCD.
● Software supply-chain security (SBOM, dependency management) and Kubernetes policy tools
(admission controllers, Pod Security Standards, policy-as-code).
● Familiarity with CIS Benchmarks, OWASP, NIST, or ISO 27001.
● Experience with SIEM, cloud detection, and incident response.
● Background in fintech, insurance, or other regulated environments.

**Live in Honeycombinsurance’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- DA [Data Analytics Engineer (Maternity Cover)](https://gurify.com/job/data-analytics-engineer-maternity-cover-at-datarails-5fcc019bb359) Datarails · Tel Aviv-Yafo, Israel · 4 days ago
- KA [DevOps Engineer](https://gurify.com/job/devops-engineer-at-kaltura-f15d48f04fe2) Kaltura · Bnei Brak, Israel · last week
- SB [Senior Backend Engineer - IL](https://gurify.com/job/senior-backend-engineer-il-1382624735e9) Tel Aviv, Israel · last week
- HU [Senior Backend Engineer](https://gurify.com/job/senior-backend-engineer-at-huskeys-100a0216249c) Huskeys · Tel Aviv · 5 days ago
- AP [Backend Engineer](https://gurify.com/job/backend-engineer-at-appcharge-03224596514a) Appcharge · Tel Aviv-Yafo, Israel · last week
- CH [DevOps Engineer](https://gurify.com/job/devops-engineer-at-checkmarx-57e4a339dc3d) Checkmarx · Ramat Gan, Israel · last week

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"DevSecOps Engineer","description":"\u003Ch3\u003EHoneycomb Insurance\u003C/h3\u003E\u003Cp\u003EAt Honeycomb, we\u0026#39;re not just building technology; we\u2019re reshaping the future of insurance.\u003C/p\u003E\u003Cp\u003EIn 2025, Honeycomb was recognized by Dun \u0026amp; Bradstreet as \u201CTop 10 Best Start Up Companies to Work For\u201D in Israel, named by LinkedIn as \u201CTop 10 Startups in Chicago\u201D, and Newsweek\u2019s \u0026quot;Greatest Startup Workplaces in America, 2025\u0026quot;. Through the first half of 2026 we\u2019ve been recognized on Inc. Magazine\u2019s \u0026quot;Best Workplaces\u0026quot; List and Forbes \u0026quot;Fintech 50\u0026quot;.\u003C/p\u003E\u003Cp\u003EHow did we earn these honors?\u003C/p\u003E\u003Cp\u003EHoneycomb is a rapidly growing global startup, generously backed by top-tier investors and powered by an exceptional team of thinkers, builders, and problem-solvers. Dual-headquartered in Chicago and Tel Aviv (R\u0026amp;D center), and with 6 offices across the U.S., we are reinventing the commercial real estate insurance industry, an industry long overdue for disruption. Just as importantly, we ensure every employee feels deeply connected to our mission and one another.\u003C/p\u003E\u003Cp\u003EWith over $100B in insured assets, Honeycomb operates across 23 states, covering more than 65% of the U.S. population and increasing its coverage.\u003C/p\u003E\u003Cp\u003EIf you\u2019re looking for a place where innovation is celebrated, culture actually means something, and smart people challenge you to be better every day - Honeycomb might be exactly what you\u2019ve been looking for.\u003C/p\u003E\u003Cp\u003EAbout the Role We are looking for a hands-on DevSecOps Engineer to strengthen the security of Honeycomb\u0026amp;#39;s cloud-native\u003Cbr /\u003Eenvironment, working closely with our Security, Engineering, DevOps, and AI teams. The role centers on Google\u003Cbr /\u003ECloud Platform (GCP), Kubernetes, vulnerability management, container and CI/CD security, cloud security\u003Cbr /\u003Eposture, and AI security. You will identify and remediate security risks across our infrastructure, applications,\u003Cbr /\u003Epipelines, and AI environments, while building automation and controls that let our teams move quickly and\u003Cbr /\u003Esecurely.\u003C/p\u003E\u003Ch3\u003EResponsibilities\u003C/h3\u003E\u003Cp\u003E\u25CF Identify, prioritize, and drive remediation of security vulnerabilities (CVEs) across container images,\u003Cbr /\u003Eapplication dependencies, Kubernetes workloads, and GCP infrastructure, in partnership with\u003Cbr /\u003EEngineering, DevOps, and AI teams.\u003Cbr /\u003E\u25CF Secure our GCP and Kubernetes environments: IAM, networking, logging, cluster and workload\u003Cbr /\u003Ehardening, RBAC, secrets, and network policies.\u003Cbr /\u003E\u25CF Own container security practices, including image scanning, base image management, secrets\u003Cbr /\u003Emanagement, and runtime security.\u003Cbr /\u003E\u25CF Operate SAST, SCA, and CSPM tools to surface code, dependency, and cloud misconfiguration risks, and\u003Cbr /\u003Ehelp teams remediate findings.\u003Cbr /\u003E\u25CF Partner with the AI team to secure AI applications, models, agents, APIs, and development\u003Cbr /\u003Eenvironments, including access controls, data protection, and monitoring of both internal and third-\u003Cbr /\u003Eparty AI tools.\u003Cbr /\u003E\u25CF Implement automated security gates and policy enforcement throughout CI/CD pipelines and the SDLC,\u003Cbr /\u003Ewithout slowing development.\u003Cbr /\u003E\u25CF Establish and improve vulnerability management processes: risk-based prioritization, remediation SLAs,\u003Cbr /\u003Eexception management, and reporting.\u003Cbr /\u003E\u25CF Automate security and operational tasks with Bash, Python, or similar.\u003Cbr /\u003E\u25CF Support security monitoring and incident response across cloud infrastructure, applications, and AI\u003Cbr /\u003Eworkloads.\u003Cbr /\u003E\u25CF Promote DevSecOps best practices and help build a security-first engineering culture.\u003C/p\u003E\u003Cp\u003ERequirements\u003Cbr /\u003E\u25CF Proven experience as a DevSecOps Engineer, or DevOps Engineer with a strong security focus.\u003Cbr /\u003E\u25CF Hands-on experience with GCP security and running Kubernetes in production.\u003C/p\u003E\u003Cp\u003E\u25CF Hands-on experience managing CVEs, vulnerability remediation, patching, and risk-based prioritization.\u003Cbr /\u003E\u25CF Strong Linux skills, including hardening, troubleshooting, networking, and logs.\u003Cbr /\u003E\u25CF Experience with container security and CI/CD security, including integrating scanning and controls into\u003Cbr /\u003Epipelines.\u003Cbr /\u003E\u25CF Experience with SAST/SCA tools (e.g., Semgrep, Snyk, SonarQube) and CSPM platforms (e.g., Wiz, Prisma\u003Cbr /\u003ECloud, CrowdStrike Falcon Cloud Security).\u003Cbr /\u003E\u25CF Solid scripting in Bash and/or Python.\u003Cbr /\u003E\u25CF Ability to work hands-on with engineering and AI/ML teams to investigate and remediate security issues.\u003Cbr /\u003E\u25CF Fluent English, written and verbal.\u003C/p\u003E\u003Cp\u003EAdvantages\u003Cbr /\u003E\u25CF Experience securing GKE at scale, including Google Cloud IAM, Workload Identity, and VPC networking.\u003Cbr /\u003E\u25CF Infrastructure as Code and GitOps tools such as Terraform, Helm, or ArgoCD.\u003Cbr /\u003E\u25CF Software supply-chain security (SBOM, dependency management) and Kubernetes policy tools\u003Cbr /\u003E(admission controllers, Pod Security Standards, policy-as-code).\u003Cbr /\u003E\u25CF Familiarity with CIS Benchmarks, OWASP, NIST, or ISO 27001.\u003Cbr /\u003E\u25CF Experience with SIEM, cloud detection, and incident response.\u003Cbr /\u003E\u25CF Background in fintech, insurance, or other regulated environments.\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"devsecops-engineer-at-honeycombinsurance-471d8afa12e4"},"url":"https://gurify.com/job/devsecops-engineer-at-honeycombinsurance-471d8afa12e4","datePosted":"2026-10-28","validThrough":"2026-12-14T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Honeycombinsurance","sameAs":"https://job-boards.greenhouse.io/honeycombinsurance"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"IL","addressLocality":"Tel Aviv"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Israel","item":"https://gurify.com/jobs/israel"},{"@type":"ListItem","position":3,"name":"DevSecOps Engineer","item":"https://gurify.com/job/devsecops-engineer-at-honeycombinsurance-471d8afa12e4"}]}
```