Senior Security Engineer - Cloud Team

Candidate must be willing to work onsite in our Tel-Aviv, Israel office. Lenovo’s Enterprise AI team is hiring a Cloud Security Engineer to design and implement the security services that protect Enterprise AI across modern hybrid environments - securing AI workloads and agents deployed across on-prem datacenters, public cloud, and SaaS. Our current focus is AI sovereignty and governance in Lenovo hybrid cloud. You will own the cloud security controls the rest of the work depends on - identity, network, workload, and data protection across on-prem datacenters, public cloud, and SaaS, plus the automation that checks they are actually in place and keeps the evidence. Job Responsibilities: Design and implement security services for hybrid cloud environments - covering identity and access, workload and container security, key and secrets management, and control-plane hardening across on-prem, public cloud, and SaaS. Build security solutions for cloud AI agents and AI workloads - securing AI agents in the cloud, inference and serving pipelines, and the data that flows through them. Design security architectures for sovereign cloud - data residency, isolation, encryption, and access controls that meet regulatory, compliance, and national-sovereignty

. Own security services end-to-end - from architecture and design, through implementation, deployment, and continuous improvement. Define reference architectures, secure-by-default patterns, and shared infrastructure that other engineers across the team build on. Translate hybrid cloud and sovereign cloud security requirements into concrete, implementable designs. Set the technical bar for quality, reliability, and operability, and mentor engineers through design reviews and pairing. Stay ahead of the field - track cloud-provider security changes, sovereign cloud and AI-workload security developments, and emerging techniques - and turn what is relevant into concrete bets for the team. Requirements: BSc in Computer Science, Information Security, or equivalent practical experience. 5+ years in software development, including AI products or systems you built that reached production. Deep, practical knowledge of at least one major cloud (AWS, Azure, or GCP) -how systems are actually built and run on it: compute, networking, storage, IAM, and managed services - with a sense of how it translates to other clouds and to on-prem. Kubernetes: comfortable working in it day to day - deploying and operating workloads, networking, RBAC, and how a cluster fits into the wider environment. Hands-on security experience, with real ownership of security work in production. Using AI coding agents in your day-to-day work. Advantage: Experience in AI security: securing AI workloads, agents, inference infrastructure, or the tool surfaces agents reach. Familiarity with how AI workloads get deployed and served, and what makes them different to secure. Work in sovereign or regulated environments, where data residency and isolation matter. Familiarity with security or AI governance frameworks such as ISO/IEC 42001, the NIST AI Risk Management Framework, or the EU AI Act. Policy-as-code and compliance automation count here too. M.Sc or Ph.D. in Computer Science or Cybersecurity. What Lenovo Can Offer You: Opportunities for career advancement and personal growth Access to a diverse range of training programs to sharpen your skills Performance-based rewards that celebrate your achievements Enjoy the best of both worlds with our hybrid setup: 3 days connecting with the team in the office and 2 days working from the comfort of your home Please note that the office is located at 121 Menachem Begin Road, Tel Aviv, 61st floor, in the POINT office complex. As per our office policy, you will be required to visit the site at least 3 times a week. #DTL #LI-Hybrid