DevSecOps

Ambition Needs a Place to Grow.

At Playtika, we create mobile games enjoyed by millions worldwide.

Combining the scale of a public company (NASDAQ: PLTK) with the speed and ownership of a startup, we are a global leader where innovation, data, and creativity shape the future of entertainment.

Here, your ideas matter, your decisions impact products, and your growth is supported across global studios.

**Bring your hunger where it belongs: at the front of the pack.

**

As a DevSecOps Engineer in Playtika’s Product Security group, you own the security of our SDLC, CI/CD pipelines, and software supply chain. Your mission is to make the secure path the easiest path for studios and shared‑tech teams by embedding security controls into developer workflows, build systems, and runtime platforms.

You will work closely with CI/CD & DevEx, Infrastructure/IT, SRE and OPS teams – as well as with other groups within the information security department itself – to design, implement, and operate scalable guardrails that keep our games and platforms secure without slowing delivery. You also act as a bridge between security and DevOps/IT teams, helping them adopt secure practices and tooling.

Responsibilities:

• Embed security into CI/CD and SCM – integrate, configure, and maintain security tools and checks (e.g., SAST, SCA, secrets, container/IaC scanning, WAF integrations) across build, test, and deploy stages; ensure findings are routed to the right owners.
• Design and maintain security automations – build and operate in‑house scripts, services, and integrations that reduce manual work (e.g., policy checks, ticket creation, asset classification, ownership mapping).
• Govern pipeline and repository usage – define and enforce secure patterns for source control, CI/CD workflows/runners, artifact repositories, and credentials; review and approve new integrations and automations from a security perspective.
• Harden infrastructure that supports delivery – help set up and maintain secure server and runner environments (cloud and on‑prem), and triage DevOps/IT/OPS vulnerabilities (e.g., misconfigurations, exposed services) with the relevant teams.
• Provide visibility and evidence – build dashboards and reports that show security posture and trends for CI/CD and DevOps environments, and provide data for audits and compliance where needed.
• Document and train – write clear documentation for security automations, standards, and runbooks; provide ad‑hoc training and guidance to DevOps, R&D, and IT teams on DevSecOps best practices.

Requirements:

Must Have

• 3+ years of experience in server/infra management and/or CI/CD engineering, with significant security responsibilities (DevSecOps, AppSec engineering, DevOps Security Champion or similar).
• Strong experience with CI/CD platforms and automation (e.g., Jenkins, TeamCity, Harness, GitHub Actions, GitLab CI, or similar) and Git‑based workflows.
• Proficiency with Unix/Linux environments (Windows Server experience is an advantage), plus solid understanding of basic networking concepts (IP, TCP/UDP, firewalls, load balancers).
• Hands‑on experience with security tooling and practices such as WAF, SAST/SCA, vulnerability scanning, secrets management, or container/IaC security.
• Scripting/automation skills in at least one language (e.g., Bash, Python, Groovy, PowerShell) for building and maintaining tools and integrations.
• Strong analytical and problem‑solving skills, with the ability to work autonomously and drive results in a cross‑functional environment.

Nice to Have

• Background as a DevSecOps engineer or DevOps security champion in a large R&D organization.
• Experience with cloud platforms (e.g., AWS or similar), configuration/management tools (e.g., Kubernetes, Ansible, Terraform, Docker), or private clouds/virtualization.
• Familiarity with database administration and additional security‑relevant areas (network debugging tools, logging/monitoring stacks).

Personal Attributes

• Automation‑first builder: you prefer robust, reusable guardrails over one‑off manual fixes.
• Collaborative bridge‑builder: effective at working between security, DevOps/IT, and R&D teams.
• Proactive and curious: self‑motivated learner who stays current on DevSecOps and supply‑chain threats and turns that knowledge into practical improvements for Playtika.

Subject to applicable laws, we may use artificial intelligence (AI) tools to assist our recruitment teams in the hiring process, including drafting job descriptions, communication, response to applications, assessments and tests, as further described in our Candidates Privacy Notice.

By applying to this job, you acknowledge that you have read and understood our Candidates Privacy Notice, including with respect to the use of AI tools, and consent to the processing of your information as described therein.

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status.

If you feel the above describes you perfectly - Apply now!

Employee at Playtika? Click here

- 3+ years of experience in server/infra management and/or CI/CD engineering, with significant security responsibilities (DevSecOps, AppSec engineering, DevOps Security Champion or similar). - Strong experience with CI/CD platforms and automation (e.g., Jenkins, TeamCity, Harness, GitHub Actions, GitLab CI, or similar) and Git-based workflows. - Proficiency with Unix/Linux environments (Windows Server experience is an advantage), plus solid understanding of basic networking concepts (IP, TCP/UDP, firewalls, load balancers). - Hands-on experience with security tooling and practices such as WAF, SAST/SCA, vulnerability scanning, secrets management, or container/IaC security. - Scripting/automation skills in at least one language (e.g., Bash, Python, Groovy, PowerShell) for building and maintaining tools and integrations. - Strong analytical and problem-solving skills, with the ability to work autonomously and drive results in a cross-functional environment.