Senior Cloud Security Engineer, JFrog

$185-200k

This position also includes an equity package of restricted stock units (RSU). In addition, JFrog employees are eligible to participate in our Employee Stock Purchase Plan

AWS

Kubernetes

GCP

Python

Bash

Azure

Powershell

Senior and Expert level

Remote in US

More information about location

Software supply chain platform

Be an early applicant

Software supply chain platform

1001+ employees

B2BSecurityEnterpriseDevOpsCloud Computing

Be an early applicant

$185-200k

This position also includes an equity package of restricted stock units (RSU). In addition, JFrog employees are eligible to participate in our Employee Stock Purchase Plan

AWS

Kubernetes

GCP

Python

Bash

Azure

Powershell

Senior and Expert level

Remote in US

More information about location

1001+ employees

B2BSecurityEnterpriseDevOpsCloud Computing

Company mission

To transform the way enterprises manage and release software updates, with liquid software that flows continuously and automatically from build all the way through to production.

Job

Company

Role

Who you are

We seek an experienced, highly motivated technology leader who embraces the opportunity to influence and advocate for security across the organization
5+ years of industry experience in security with solid knowledge of cloud security principles and practices
Hands-on experience with cloud (AWS/GCP/Azure) preferably with containerized and kubernetes environments
Proficiency with cloud security platforms such as CSPM, DSPM, SSPM, and CNAP
Hands-on experience with SIEM tools and developing SOAR playbooks
Strong understanding and application of the principle of least privilege; experience with workload identity is a plus
Experience with vulnerability management and threat detection platforms
Proficiency in at least one scripting language (Python, PowerShell, Bash)
Experience with Endpoint Detection and Response (EDR) solutions
Familiarity with DevSecOps principles such as CI/CD or Infrastructure as Code (IaC) is advantageous
Knowledge of workload/runtime protection is a significant advantage

What the job involves

As a Senior Cloud Security Engineer, you will lead incident response efforts and integrate security practices into the development lifecycle, enhancing our organization's cybersecurity posture
You will further develop JFrog's Incident Response and Security Operations program to protect our assets now and in the future
Plan, design, build, and execute JFrog’s security engineering operations, working in an agile environment
Identify emerging cybersecurity threats, misconfigurations, and vulnerabilities by conducting continuous monitoring and log analysis related to JFrog Cloud
Perform incident triage and handling by determining scope, urgency, and potential impact, identifying specific vulnerabilities, recommending actions for swift remediation, and conducting post-incident reviews to identify lessons learned and areas for improvement
Partner with the engineering teams in the company to drive the security mission across the organization
Develop, implement, and manage DevSecOps-focused incident response plans, playbooks, standard operating procedures, and security tools and technologies
Provide on-call security support as needed

Our take

Although people expect their software to be updated continually, unobtrusively and securely, in practice this isn't often the case. JFrog was founded in 2008 with a mission to change the way companies release software updates, providing an automation-first platform for collaborative DevOps.

While there are other collaborative DevOps platforms in the market, such as Docker Hub, Azure DevOps and Kubernetes, JFrog stands out with its use of REST APIs to automate the development pipeline, and its combination of DevOps and DevSecOps (development security) in a single platform. This has helped JFrog grow a client base of thousands of companies, which includes firms such as Dell, Netflix, Facebook and the majority of the Fortune 100.

JFrog has enjoyed rapid growth throughout the wider slowdown in the tech sector. It has been focusing on its security product since its acquisition of IoT security specialists Vdoo in 2021, and this has culminated in strong sales for its recently-released security product. It will continue to focus on developing its product and is on track to achieve its aim of becoming the de-facto standard for update management.

Freddie

Company Specialist at Welcome to the Jungle

Insights

Top investors

Few candidates hear
back within 2 weeks

17% employee growth in 12 months

Glassdoor (4.1)

Company

Funding (last 2 of 5 rounds)

Oct 2018

$165m

SERIES D

Jan 2016

$50m

SERIES C

Total funding: $226.5m

Company benefits

Employee Stock Purchase Plan
Medical, dental & vision
Retirement, wellness and much more!

Company values

Integrity
Community and customer happiness
Thinking BIG
Everyone counts, everyone matters
Innovation
Team Spirit
Open Communication
Agility
WIN!
Care

Company HQ

Sunnyvale, CA

Articles

DevOps platform JFrog acquires AI-based IoT and connected device security specialist Vdoo for $300M

JFrog Announces Fourth Quarter and Fiscal 2022 Results

JFrog Announces First Quarter Fiscal 2023 Results

How This Software Developer Is Helping To Keep The Cloud Safe

JFrog to Acquire Qwak to Streamline AI Models from Development to Production

Leadership

Shlomi Ben Haim

(CEO)

Is a member of the Forbes Technology Council. Was previously CEO of AlphaCSP Java Experts and a Major in the Israeli Air Force.

Yoav Landman

(CTO)

Was previously Senior Consultant with AlphaCSP and a Senior Developer at Attunity, Verve Inc and Sausage Software.

Fred Simon

(Chief Architect)

Was Founder of AlphaCSP. Before that was Developer with Bouygues and SGT.

Share this job

View 11 more jobs at JFrog