What Do We Do?
Triple Whale is the AI operating system built for modern commmerce. We help you see what's actually working in your business, what's not, and what to do next. Then we take action for you — pausing the underperforming ad, generating the next batch of creative, flagging the inventory risk before it hurts your bottom line.
We pull every signal in your business into one place, and put it on the most trusted measurement foundation in the industry. And on top of that, we give you the only AI harness in commerce — Moby — letting you tap any LLM you want, grounded in the full context of your business. Moby doesn't just surface insights, it executes decisions for you, with automations that make the rest of your stack smarter.
The result: more than 65,000 brands like Kitsch, OUAI, and True Classic turn mountains of complex data into actions that actually grow profit, at a speed and scale that is not humanly possible.
Why Triple Whale Needs You:
Triple Whale is a data and AI platform serving thousands of ecommerce brands. We handle sensitive merchant data and credentials, making security core to our product.
As a Senior Security Engineer, you’ll be joining an expanding team to design and build security controls across our cloud infrastructure, applications, and AI systems. You’ll work alongside the Infrastructure and engineering teams to turn security requirements into practical protections that support fast development.
What You’ll Do:
Design and implement controls for workload identity, least-privilege IAM, secrets management, network isolation, and egress.
Secure AI agents and code execution environments through sandboxing and clear access boundaries.
Conduct security reviews of services, systems, and architecture, and work with engineers to implement fixes.
Perform internal penetration tests to identify vulnerabilities and validate security controls.
Build security monitoring, detection rules, and alerting across our infrastructure and applications.
Build security into development workflows, CI/CD, infrastructure as code, and software dependencies.
Support incident investigations and address underlying security weaknesses.
Technologies we use:
Languages : Node.js, TypeScript
Databases : ClickHouse, MongoDB, Redis, Postgres
Infrastructure : Kubernetes, Knative, GCP, Temporal, Pulumi
Tooling : Git, GitHub, GCP build infrastructure, GitHub Actions, PubSub
What You’ll Bring:
Ability to work from our Jerusalem office (located in the Central Bus Station next to the train) 2 times a week (Monday & Wednesday) is required
High level of English (spoken and written)
Strong hands-on experience in cloud, infrastructure, or application security
Deep understanding of Kubernetes, IAM, networking, and cloud security; GCP experience preferred.
Strong TypeScript development skills and experience building security tooling and automation.
Experience with security reviews, threat modeling, penetration testing, and vulnerability remediation.
Practical judgment and the ability to work independently alongside engineering teams.
Who Succeeds at Triple Whale:
At Triple Whale, you’ll support and collaborate with a world-class product & engineering team that ships quickly and holds a high standard for excellence. We operate in a fast-paced, dynamic environment where ownership, accountability, and execution matter.
This role is a great fit for someone who thrives in an environment that values speed without compromising on quality, and who enjoys taking full ownership of their work end to end. If you are curious by nature, demonstrate strong entrepreneurial thinking, are not afraid to ask questions, and know how to navigate ambiguity while moving quickly, you will do well at Triple Whale.
Our Values
We Are Customer Obsessed : From our mission to every detailed project, everything we do is designed to create a positive impact for our customers.
We Move (Very!) Quickly : The speed at which we work, iterate, and deliver value is our most competitive…