Were looking for an Application Security Engineer with a passion for AppSec to join our growing team.
Responsibilities:
Build and maintain an advanced security research lab to test, evaluate, and supercharge detection tools.
Analyze tools across multiple domains: SAST, SCA, DAST, Secret Detection, IaC Scanning, Container Scanning, CSPM, and more.
Identify detection gaps and develop techniques and rules to close them.
Leverage Python and AI practices to automate research and drive smarter detection strategies.
Monitor emerging threats, CVEs, and high-profile incidents – and develop relevant detection content and platform enhancements.
Collaborate closely with engineering, product, and marketing.
Responsibilities:
Build and maintain an advanced security research lab to test, evaluate, and supercharge detection tools.
Analyze tools across multiple domains: SAST, SCA, DAST, Secret Detection, IaC Scanning, Container Scanning, CSPM, and more.
Identify detection gaps and develop techniques and rules to close them.
Leverage Python and AI practices to automate research and drive smarter detection strategies.
Monitor emerging threats, CVEs, and high-profile incidents – and develop relevant detection content and platform enhancements.
Collaborate closely with engineering, product, and marketing.
Requirements:
Strong hands-on interest experience in Application Security – including knowledge of software vulnerabilities, secure coding practices, and modern development workflows (a strong advantage).
2+ years of experience as a backend engineer building large-scale products.
Proficiency in Python/Node/Go with a passion for writing clean, maintainable code.
Experience with Docker containers.
Familiarity with at least one major AppSec domain: SAST, SCA, Secret Detection, IaC Scanning, Container Scanning, CSPM, or DAST.
Understanding of CI/CD pipelines and modern DevOps workflows.
Self-driven and curious, with the ability to work independently in a dynamic startup environment.
Hands-on experience with AI dev assistants such as Cursor is required, since we rely on them in day-to-day development.
Advantage:
Experience using AI tools and practices.
Knowledge of cloud-native security (AWS, GCP, Azure).
Service in elite tech units (e.g., 81, 8200, Talpiot) or equivalent experience is a nice-to-have.
Contributions to open-source security tools, technical blogs, or research publications.
Strong hands-on interest experience in Application Security – including knowledge of software vulnerabilities, secure coding practices, and modern development workflows (a strong advantage).
2+ years of experience as a backend engineer building large-scale products.
Proficiency in Python/Node/Go with a passion for writing clean, maintainable code.
Experience with Docker containers.
Familiarity with at least one major AppSec domain: SAST, SCA, Secret Detection, IaC Scanning, Container Scanning, CSPM, or DAST.
Understanding of CI/CD pipelines and modern DevOps workflows.
Self-driven and curious, with the ability to work independently in a dynamic startup environment.
Hands-on experience with AI dev assistants such as Cursor is required, since we rely on them in day-to-day development.
Advantage:
Experience using AI tools and practices.
Knowledge of cloud-native security (AWS, GCP, Azure).
Service in elite tech units (e.g., 81, 8200, Talpiot) or equivalent experience is a nice-to-have.
Contributions to open-source security tools, technical blogs, or research publications.
This position is open to all candidates.
