Advisory Cloud Security Engineer

We are Lenovo. We do what we say. We own what we do. We WOW our customers.
Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).
This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com (https://www.lenovo.com), and read about the latest news via our StoryHub (https://news.lenovo.com/).

Candidate must be willing to work onsite in our Tel-Aviv, Israel office.

Lenovo’s Enterprise AI team is hiring a Cloud Security Engineer to design and implement the security services that protect Enterprise AI across modern hybrid environments - securing AI workloads and agents deployed across on-prem datacenters, public cloud, and SaaS. Our current focus is AI sovereignty and governance in Lenovo hybrid cloud.

You will own the cloud security controls the rest of the work depends on - identity, network, workload, and data protection across on-prem datacenters, public cloud, and SaaS, plus the automation that checks they are actually in place and keeps the evidence.

Job Responsibilities:

- Design and implement security services for hybrid cloud environments - covering identity and access, workload and container security, key and secrets management, and control-plane hardening across on-prem, public cloud, and SaaS.

- Build security solutions for cloud AI agents and AI workloads - securing AI agents in the cloud, inference and serving pipelines, and the data that flows through them.

- Design security architectures for sovereign cloud - data residency, isolation, encryption, and access controls that meet regulatory, compliance, and national-sovereignty requirements.

- Own security services end-to-end - from architecture and design, through implementation, deployment, and continuous improvement.

- Define reference architectures, secure-by-default patterns, and shared infrastructure that other engineers across the team build on.

- Translate hybrid cloud and sovereign cloud security requirements into concrete, implementable designs.

- Set the technical bar for quality, reliability, and operability, and mentor engineers through design reviews and pairing.

- Stay ahead of the field - track cloud-provider security changes, sovereign cloud and AI-workload security developments, and emerging techniques - and turn what is relevant into concrete bets for the team.

Requirements:

- BSc in Computer Science, Information Security, or equivalent practical experience.

- 5+ years in software development, including AI products or systems you built that reached production.

- Deep, practical knowledge of at least one major cloud (AWS, Azure, or GCP) -how systems are actually built and run on it: compute, networking, storage, IAM, and managed services - with a sense of how it translates to other clouds and to on-prem.

- Kubernetes: comfortable working in it day to day - deploying and operating workloads, networking, RBAC, and how a cluster fits into the wider environment.

- Hands-on security experience, with real ownership of security work in production.

- Using AI coding agents in your day-to-day work.

Advantage:

- Experience in AI security: securing AI workloads, agents, inference infrastructure, or the tool surfaces agents reach.

- Familiarity with how AI workloads get deployed and served, and what makes them different to secure.

- Work in sovereign or regulated environments, where data residency and isolation matter.

- Familiarity with security or AI governance frameworks such as ISO/IEC 42001, the NIST AI Risk Management Framework, or the EU AI Act. Policy-as-code and compliance automation count here too.

- M.Sc or Ph.D. in Computer Science or Cybersecurity.

What Lenovo Can Offer You:

- Opportunities for career advancement and personal growth
- Access to a diverse range of training programs to sharpen your skills
- Performance-based rewards that celebrate your achievements
- Enjoy the best of both worlds with our hybrid setup: 3 days connecting with the team in the office and 2 days working from the comfort of your home

Please note that the office is located at 121 Menachem Begin Road, Tel Aviv, 61st floor, in the POINT office complex. As per our office policy, you will be required to visit the site at least 3 times a week.

#DTL

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.

AI PROCESSING NOTICE
We use AI-based tools to support some of our processes (e.g. online interviews recordings and transcripts) in order to achieve better efficiency, accuracy and for our documentation purposes. AI can make mistakes, but we always make sure that the outputs are manually reviewed by a human. You can always opt-out or contact us in case of any question.