DevSecOps Engineer

About Us Riskified empowers businesses to unleash ecommerce growth by taking risk off the table. Many of the world’s biggest brands and publicly traded companies selling online rely on Riskified for guaranteed protection against chargebacks, to fight fraud and policy abuse at scale, and to improve customer retention. Developed and managed by the largest team of ecommerce risk analysts, data scientists and researchers, Riskified’s AI-powered fraud and risk intelligence platform analyzes the individual behind each interaction to provide real-time decisions and robust identity-based insights. Riskified is proud to work with incredible companies in virtually all industries including Booking.com, Acer, Gucci, Lorna Jane, GoPro, and many more . We thrive in a collaborative work setting, alongside great people, to build and enhance products that matter. Abundant opportunities to create and contribute provide us with a sense of purpose that extends beyond ourselves, leaving a lasting impact. These sentiments capture why we choose Riskified every day. About the Role We’re looking for an experienced and passionate DevSecOps Engineer to join our dynamic Information Security team. In this role, you’ll work closely with our Development , SRE , and Security teams to ensure the security and scalability of our infrastructure, with a focus on maintaining secure cloud environments and applications. As part of a cutting-edge cloud and web application security team, you'll help drive the agile development of secure, resilient, and high-performance applications What You'll Be Doing Collaborate with development, operations, and security teams to define and enforce best practices for cloud security, infrastructure security, and operational security standards across the entire cloud environment. Utilize DevOps tools to build, harden, maintain, and integrate a robust security orchestration platform into our cloud infrastructure, ensuring security is embedded throughout the entire lifecycle. Develop and implement Infrastructure as Code (IaC) solutions using Terraform to automate security, compliance, and infrastructure management processes within our large-scale AWS cloud infrastructure. Manage, monitor, and continuously improve our cloud infrastructure to ensure it remains secure, scalable, and resilient, proactively identifying and mitigating potential security vulnerabilities before they can be exploited by attackers. Qualifications 3+ years of experience in Information Security and DevOps methodologies. Extensive experience with Infrastructure as Code (IaC) , particularly using Terraform to automate and manage cloud resources. In-depth hands-on experience with Amazon Web Services (AWS) , including working with VPC , ELB , IAM , KMS , EC2 , CloudTrail , Lambda , Config , and other AWS services to design, deploy, and manage scalable cloud infrastructure. Hands-on experience with scripting and coding in one or more of the following languages: Python , Golang , Node.js . Strong foundational knowledge of Linux and hands-on experience in managing Linux-based systems. Self-motivated with the ability to manage and prioritize multiple tasks and projects independently. A strong growth mindset and eagerness to learn new technologies and approaches. Solid understanding of Kubernetes fundamentals, with a focus on securing containerized applications and ensuring the security of Kubernetes clusters and workloads (optional, but a plus). Life at Riskified We are a fast-growing and dynamic tech company with 750+ team members globally. We value collaboration and innovative thinking. We’re looking for bright, driven, and passionate people to grow with us. Our Tel-Aviv team is currently working in a hybrid of remote and in-office work. We have recently moved to our new space in Tel Aviv - check it out here ! Some of our Tel Aviv Benefits & Perks: Equity for all employees, Keren Hishtalmut, pension Private medical insurance, e xtra time off for parents and caregivers Co