Tel Aviv-Yafo, Tel Aviv District, IL (On-site)1 open job
JFrog Ltd. builds the Artifactory repository manager and a DevOps/DevSecOps platform covering artifact management, security scanning, and continuous delivery, plus AI governance tooling.
JFrog Ltd. builds the infrastructure that sits between source code and production - and, by extension, the controls that decide whether what ships is what you think it shipped. At the center is JFrog Artifactory, a repository manager handling more than 30 package types (Docker, Maven, npm, PyPi among them). For a security team, that positioning matters: the artifact repository is a chokepoint. Compromise a build, poison a dependency, or hijack a CI credential and the repository is where the blast radius gets organized.
The wider JFrog DevOps/DevSecOps platform spans artifact management, security scanning, and continuous delivery, marketed as "liquid software" - continuous, secured delivery from code to production. The company counts thousands of organizations worldwide as customers, with many Fortune 100 companies among them, across financial services, healthcare, gaming, automotive, technology, and the public sector. Domains on the table: software supply chain security, package management, security scanning, and continuous delivery.
Newer work targets the AI layer directly. JFrog's "AgentSecOps" approach includes the JFrog AI Catalog, Agent Guard, an MCP Registry, and an Agent Skills Registry - tooling for governing and securing AI models, agents, plugins, and artifacts. It is an explicit bet that agent-driven development needs the same supply-chain controls as human-written code. The company partners with GitHub, NVIDIA, Docker, and ServiceNow, and integrates with AI coding assistants including Claude, Cursor, and Codex.
