Security Tech Lead - Cloud Team

Candidate must be willing to work onsite in our Tel-Aviv, Israel office. Lenovo’s Enterprise AI team is hiring a Senior Security Engineer to design and implement the security services that protect Enterprise AI across modern hybrid environments - securing AI workloads and agents deployed across on-prem datacenters, public cloud, and SaaS. Our current focus is AI sovereignty and governance in Lenovo hybrid cloud. You will own the technical design and delivery of security solutions across hybrid cloud, AI workloads, and sovereign cloud - building production-grade services that secure AI running on infrastructure spanning on-prem datacenters, public cloud, and SaaS. Job Responsibilities: Own the security architecture of the platform end to end, from design through implementation, deployment, and continuous improvement. Design and implement security services for hybrid cloud environments: identity and access, workload and container security, key and secrets management, and control-plane hardening across on-prem, public cloud, and SaaS. Design the security architecture for sovereign cloud: data residency, isolation, encryption, and access controls that meet regulatory, compliance, and national-sovereignty

. Build the security layer for AI workloads and agents, covering inference and serving pipelines, agent runtimes, and the data that flows through them. Define reference architectures, secure-by-default patterns, and shared infrastructure that engineers across the team build on. Threat model the platform and the paths AI workloads run through, and drive the findings into design and implementation. Translate hybrid and sovereign cloud security requirements into concrete, implementable designs. Set the technical bar for quality, reliability, and operability, and mentor engineers through design reviews and pairing. Track cloud-provider security changes and developments in sovereign cloud and AI-workload security, and turn what matters into concrete bets for the team. Requirements: BSc in Computer Science, or equivalent practical experience. 5+ years in security engineering, product security, or application security, with real ownership of systems in production. Core security engineering depth: identity and access, cryptography and key management, secrets handling, workload isolation, and secure-by-default design. Familiarity with AI security - how AI systems get attacked and where their weak points are: prompt and tool injection, data-pipeline abuse, agent failure modes. Using AI coding agents in your day-to-day work. Advantage: Hands-on experience securing AI workloads, agents, inference endpoints, or the data pipelines behind them. Work in sovereign or regulated environments, where data residency and isolation matter. Security or AI governance frameworks such as ISO/IEC 42001, the NIST AI Risk Management Framework, or the EU AI Act. Policy-as-code and compliance automation count here too. MSc or PhD in Computer Science or Cybersecurity. Cloud security in practice: depth in at least one major cloud (AWS, Azure, or GCP), and a sense of how the controls translate elsewhere. What Lenovo Can Offer You: Opportunities for career advancement and personal growth Access to a diverse range of training programs to sharpen your skills Performance-based rewards that celebrate your achievements Enjoy the best of both worlds with our hybrid setup: 3 days connecting with the team in the office and 2 days working from the comfort of your home Please note that the office is located at 121 Menachem Begin Road, Tel Aviv, 61st floor, in the POINT office complex. As per our office policy, you will be required to visit the site at least 3 times a week. #DTL #LI-Hybrid