Security Engineer

Yotpo is leading the next era of trust and loyalty in eCommerce. With AI-powered Reviews and Loyalty solutions, we help brands turn browsers into customers and customers into advocates. Through deep integrations across the eCommerce ecosystem and the trust of over 30,000 global brands, Yotpo delivers seamless omnichannel experiences that increase conversion, strengthen customer relationships, and drive profitable, long-term growth.

At Yotpo, we are committed to creating secure, reliable, and innovative solutions for our customers. The Security Team is a core part of every aspect of Yotpo’s business - from customers to backend systems and everything in between. As a Junior Cloud Security Engineer, you will play an integral role equal member of a cross‑functional engineering squad, partnering with engineers at every level and collaborating with product managers, designers, and more. Ship features that deliver AI‑driven insights, multilingual experiences, and next‑gen loyalty capabilities for thousands of merchants.

• Implementing and maintaining cloud security controls across Yotpo’s SDLC (AWS, Kubernetes, CI/CD pipelines, Agentic) and self-managed systems.
• Participate in cloud security assessments, helping to identify potential security gaps and learning to recommend remediation strategies.
• Contribute to vulnerability management workflows by tracking findings, supporting remediation efforts, and learning to communicate with stakeholders.
• Learn to write and maintain scripts to automate routine security tasks and improve operational efficiency.
• Collaborate with DevOps, R&D, and Product teams to understand security and compliance requirements and help implement secure solutions.
• Document security processes, configurations, and learnings to contribute to the team knowledge base.
• Stay curious and eager to learn about modern security tools, technologies, and best practices.
• Support Yotpo's transition into the AI era by helping secure and ensure compliance of AI agentic infrastructure (e.g., agent permissions, tool access, data flows).

• Bachelor’s degree in Computer Science, Cybersecurity/Information Security, or related field.
• Foundational understanding of cloud computing concepts.
• Basic knowledge of security principles including authentication, authorization, encryption, and network security.
• Familiarity with Linux/Unix systems and basic command-line operations.
• Strong willingness to learn and ability to quickly acquire new skills.
• Good communication skills and ability to work collaboratively in a team environment.
• Problem-solving mindset with attention to detail.
• Good written and verbal English.

• Track to success – work in a dynamic organization with ambient and laid-back office atmosphere
• Individualized career development, rewards, and recognition.
• Work-life balance – 25 days paid vacation with add-ons for loyalty, regular team buildings and celebrations in and outside the country
• Additional health insurance package
• Internal mobility program and refer-a-friend program
• Managing a fixed monthly budget for social benefits thru Re:Benefit – a flexible online benefits solution
• Food vouchers
• E-learning portals and knowledge sharing sessions.
• Company backed Hackathons, Tech conferences, workshops events, etc
• Stocked kitchen and bar.
• Equity in options.
• Flexible hybrid capacity