Senior Software Engineer (DevSecOps)

Senior Software Engineer (DevSecOps) role at monday.com, responsible for securing CI/CD pipelines, working with Web Application Firewalls, and managing Cloud Security Posture. The ideal candidate will foster security awareness across infrastructure, development, and security teams.

• Implement and manage security controls for CI/CD pipelines
• Automate security testing and vulnerability management within CI/CD using Terraform
• Collaborate with development teams to integrate security best practices
• Configure and manage Web Application Firewalls (e.g., Cloudflare) to protect web applications
• Monitor and update WAF rules for new vulnerabilities and attack vectors
• Conduct regular security assessments and audits of WAF configurations
• Develop and implement cloud security best practices and policies
• Continuously monitor cloud environments using tools like AWS Guard Duty, Wiz, Orca, DataDog
• Collaborate with cloud operations teams to identify and remediate security risks
• Manage security cloud configuration with Terraform and CDK
• Develop security tools in the organization IDP
• Test and perform PoC of new security tools to foster Secure by Design principle

• At least 5 years of experience as a Software Engineer
• Minimum of 3 years as a DevOps Engineer
• Passion for keeping systems secure
• Proficiency in Python/Go/Typescript
• Experience with Kubernetes
• Strong understanding of operating systems and networking
• Expertise in Shift Left/Secure by Design inside CI/CD pipelines using SAST/DAST tools such as SonarQube, Dependabot, Wiz
• Experience with configuring and managing Web Application Firewalls (e.g., AWS WAF, Cloudflare)
• Excellent problem-solving and communication skills