Security Engineer jobs in Tel Aviv-Yafo

Description At Sunbit, we're building financial technology that puts people first. By combining intelligent decisioning with a personalized, transparent approach, we help consumers access the payment options that are right for them while empowering merchants to build stronger customer relationships. Engineering is at the heart of how we make that happen. We build scalable distributed systems, cloud-native services, intelligent data platforms, and AI-powered solutions that enable real-time financial decisions at scale. By leveraging modern engineering practices and integrating AI into both our products and development workflows, we solve complex technical challenges, accelerate innovation, and continuously improve the way we build software. Every service, model, and architectural decision we make directly impacts our products, our customers, and the future of financial technology. About the Role We are looking for an Application Security Engineer to join our Security Engineering team. You will take ownership of strengthening security across Sunbit’s products, services, and development lifecycle. This includes identifying and addressing security gaps in application architecture and code, APIs and service-to-service communication, authentication and authorization flows, open source dependencies and third-party libraries, CI/CD pipelines and build systems, secrets handling, and AI-powered product features. As a Security Engineer at Sunbit, you will dig into how our systems actually work, understand where the real risk is, and decide what needs to be built to close it. Some problems are solved by changing an architecture or a design pattern, others by implementing a new control, embedding a security gate into the pipeline, integrating and tailoring a security platform, or writing something from scratch. You will own that decision and the implementation that follows. The Security Engineering team works as a group of all-rounders. Alongside your core focus, you will contribute to cloud and infrastructure security, corporate IT security, detection engineering, incident response, and our growing AI security work, both securing AI workloads and using AI to make our own security capabilities better. What You Will Work On • Identify security gaps across Sunbit’s applications, services, and development lifecycle, then translate them into practical technical solutions. • Design and implement scalable security controls that address root causes and fit our architecture and engineering practices. • Review architectures and designs, run threat modeling, and guide R&D teams toward secure patterns before code is written. • Secure APIs, authentication and authorization flows, service-to-service trust, data handling, and multi-tenant boundaries. • Own the secure development lifecycle end to end, including security gates in GitHub Actions, SAST, SCA, secrets scanning, and dependency and supply chain risk. • Build reusable security capabilities, libraries, paved-road patterns, and developer-facing tooling that make the secure path the default path. • Build custom AI agents and AI-powered capabilities that improve our security tools, workflows, visibility, and control. • Understand and secure AI-powered product features, including their data access, identities, permissions, integrations, and runtime behavior. • Partner with R&D, DevOps, Infrastructure, Data, AI, and IT teams from initial analysis through implementation, adoption, and validation. Requirements • At least 5 years of hands-on experience in application security, product security, security engineering, DevSecOps, or a related field. • Strong experience securing production applications and services, including APIs, microservices, and cloud-native workloads on AWS and Kubernetes. • Proven ability to identify security gaps, design appropriate controls, and take solutions through implementation. • Hands-on experience with secure code review, threat modeling, API security, and common vulnerability classes in modern application stacks. • Practical experience embedding security into CI/CD and GitOps workflows, including GitHub Actions, SAST, DAST, SCA, and secrets scanning. • Strong understanding of authentication and authorization, session management, secrets management, cryptography in practice, TLS, SSO, SAML, and OIDC. • Ability to read and write code in at least one modern language, and enough engineering depth to work as a peer to developers. • A broad security mindset, strong engineering judgment, and the ability to collaborate effectively with technical teams. Nice to Have • Experience building AI agents, LLM-based tools, or AI-powered security capabilities. • Experience assessing or securing AI workloads, including data exposure, prompt injection, agent permissions, and third-party integrations. • Experience with ASPM platforms, WAF, bot and abuse prevention, or runtime application protection. • Familiarity with cloud and infrastructure security, Terraform, policy as code, and container security. • Offensive security background, such as penetration testing, bug bounty, or exploit development. • Experience working in a regulated fintech or financial services environment. Recruitment Fraud Disclaimer We’ve been made aware of fraudsters impersonating Sunbit employees during the hiring process. Please note that all official communication will come from an @sunbit.com email address, through our applicant tracking platform @sunbit.comeet-notifications.com or directly via LinkedIn. We will never ask for your age, Social Security number, bank account details, payment of any kind, or other unrelated personal information during the application process. Our hiring process always includes interviews, either by phone, zoom, or in person, before any offer is made. If something feels suspicious, please contact us at HR to confirm. We ask that you contact HR only about potential instances of fraud. HR does not reach our recruiting team directly. Your application directly through the posting is the best way to ensure that your candidacy is reviewed by our team. Due to the volume of applications, we will not respond to nor forward emails about your candidacy that are sent to HR directly, and your email about your application will be deleted from our systems.

Applying to Paxos? Our only careers site is paxos.com/careers, and we only recruit via @paxos.com email. Details below. ___ About Paxos Today’s financial infrastructure is archaic, expensive, inefficient and risky — supporting a system that leaves out more people than it lets in. So we’re rebuilding it. We’re on a mission to open the world’s financial system to everyone by enabling the instant movement of any asset, any time, in a trustworthy way. For over a decade, we’ve built blockchain infrastructure that tokenizes, custodies, trades and settles assets for the world's leading financial institutions, like PayPal, Venmo, Mastercard, Interactive Brokers and Charles Schwab. About the team The Security team at Paxos protects the cloud infrastructure, crypto systems, endpoints, and network that our regulated financial platform runs on. You'll join the Detection and Response function, working alongside our 24x7 SOC, which handles first-line triage, and partnering with Product Security teams to validate that our coverage holds up against real attacker techniques. About the role The Senior Detection and Response Engineer at Paxos serves as a builder of the detections, hunts, and automations that protect our cloud infrastructure, crypto systems, endpoints, and network. You will write detections as code and automate response, and act as a purple teamer, emulating attacks alongside our Product Security teams to confirm our detections work. Our 24x7 SOC handles first-line triage, so your focus is the detection engineering, threat hunting, and validation that make our coverage effective. Strong hands-on investigation skills are expected, but they support this work rather than define it. What you'll do • Detection Coverage & Quality: Ship production-grade detections as code with measurable signal improvements—reducing false positives and closing gaps identified in purple team exercises. • Validated Defenses: Run purple team exercises with other teams to confirm detection effectiveness and identify blind spots. • Threat Hunting Program: Execute proactive hunts based on threat intelligence and convert findings into new detections and documented IOCs/TTPs. • Operational Efficiency: Build automations to accelerate investigation and triage; create and maintain runbooks and incident write-ups that make response consistent and repeatable across the team. • Detection Stack: Identify gaps and integrate best-in-class tools that increase team effectiveness and visibility across endpoints, cloud, network, and signing systems. About you • You bring 5-8+ years of experience in security operations, detection engineering, offensive security testing, or a related security engineering role — with a track record of scope growth, not just years. • You independently own complex, ambiguous, or multi-stage incidents from initial triage through containment, eradication, and recovery — making the call in the moment and building or improving the runbook afterward, rather than waiting for one to exist. • You bring deep, hands-on expertise in SIEM and EDR platforms, can design new detections from scratch, own detection strategy for a significant surface area, and meaningfully reduce false-positive rates across a rule set you own. • You can design and run purple-team exercises in partnership with other engineering teams, emulating real attacker techniques and using the findings to reshape the detection roadmap rather than just confirm what already works. • You have a strong point of view on what tools and architecture the team should invest in, not just how to use what's already there, and you make credible build-vs-buy calls. • You think like a builder and continuously find ways to automate repetitive security workflows, applying AI thoughtfully to improve the speed, consistency, and scale of investigation and response across the team. • You produce original threat intelligence assessments and run proactive threat hunts based on hypotheses, translating findings directly into new detections and a stronger detection roadmap. • You communicate fluently with engineering leadership and cross-functional stakeholders during major incidents, and your docs and retros shape team direction, not just record what happened. • You actively mentor junior members of the team, serve as a trusted technical escalation point, and have a track record of measurably accelerating others' growth. • You're comfortable participating in an on-call rotation and can act as incident commander when needed — driving structural fixes that prevent a class of incidents from recurring, not just one instance. Important Notice for Paxos Applicants Fraudulent accounts sometimes pose as Paxos recruiters on LinkedIn and other platforms, and fake websites sometimes impersonate our careers site. These scammers attempt to deceive applicants into paying for job opportunities or providing personal financial information. To verify a legitimate Paxos opportunity: • Our only official careers site is paxos.com/careers • We only use @paxos.com email addresses • We never ask for payment or financial details to apply, interview, or work here • For technical roles, we do not perform a coding interview without prior screening by our engineering team Thanks for your interest in Paxos!

At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee. Semperis is looking for a hands-on Senior Security Operations Engineer who wants to do more than monitor alerts and hand off tickets. In this role, you will have the rare opportunity to identify security problems, understand their root causes, and work directly with the teams responsible for fixing them. You will strengthen Semperis’ threat detection, incident response, vulnerability management, and cloud security operations through a combination of investigation, engineering, and automation. You will design and tune detections, lead investigations and response efforts, prioritize and route vulnerabilities and CSPM/CWP findings, improve security telemetry, and build capabilities that reduce manual effort and help the organization respond faster. This is an engineering-focused SecOps role- not a traditional alert-monitoring position. You will be expected to turn operational insights into durable improvements: better detections, stronger controls, cleaner telemetry, streamlined workflows, and measurable risk reduction. You will work closely with Cloud Security, Identity and IT, AppSec, Product Engineering, Platform Engineering, GRC, and service owners to secure Semperis’ corporate and cloud environments. You will also help shape how Semperis secures AI-enabled tools, agents, and automation as they become part of the way we work. If you enjoy moving from signal to solution—and want the autonomy and cross-functional access to make security improvements stick—this role is built for you. What You Will Do Threat Detection and Incident Response • Operate and improve SIEM, EDR, cloud, identity, email, and security monitoring capabilities. • Develop and tune detection rules, analytics, dashboards, alert routing, and investigation playbooks. • Investigate security alerts and incidents, including scoping, evidence collection, containment, remediation coordination, and recovery tracking. • Support high-severity incident response and contribute to post-incident improvements. Vulnerability and Cloud Security Operations • Lead SecOps triage of vulnerability, exposure, endpoint patching, and CSPM/CWP findings across endpoints, third-party applications, cloud environments, and other technology assets. • Validate findings, assess risk using business and technical context, assign ownership, establish remediation priorities, track patching and other corrective actions, manage exceptions, and verify closure. • Partner with Cloud Security on posture-management rules, alert tuning, cloud logging, and recurring misconfiguration analysis. • Define monitoring and detection requirements for new cloud services, SaaS capabilities, and significant architecture changes. • Monitor privileged activity, develop detections for risky identity, endpoint, and cloud administration behavior, and support endpoint-hardening efforts focused on least privilege, reduce local-administrator access, and secure configuration. Automation, Metrics, and Engineering • Build scripts, integrations, workflows, and playbooks that improve triage, enrichment, notification, containment, remediation tracking, and reporting. • Monitor log-source and connector health and improve telemetry coverage across cloud, identity, endpoint, SaaS, and network sources. • Maintain metrics covering MTTD, MTTR, alert quality, incident trends, detection coverage, vulnerability risk, CSPM/CWP exposure, and remediation performance. • Maintain clear runbooks, technical documentation, and operational records. AI Security, Guardrails, and Monitoring • Assess AI tools, agents, plugins, and MCP integrations for data access, identity, execution, retention, and supply chain risk. • Design and operate guardrails for least-privilege identities, read-only-by-default connectors, sandboxed execution, network-egress restrictions, and human approval before irreversible actions. • Monitor prompts, retrieved content, model outputs, tool calls, agent actions, and administrative changes for prompt injection, indirect prompt injection, sensitive data exposure, unsafe code, abnormal behavior, and policy violations. • Onboard AI audit and runtime telemetry into the SIEM and build detections and response playbooks for rogue tools, connector misuse, suspicious tool calls, data exfiltration, and agent compromise. • Run controlled pilots and adversarial tests, measure false positives and user impact, and promote controls from monitor or flag to block based on evidence. Cross-Functional Security Engineering • Translate security findings into clear actions, owners, priorities, and deadlines. • Provide practical security guidance to engineering and IT teams. • Mentor analysts and engineers through technical reviews, incident walkthroughs, and knowledge sharing. • Balance risk, engineering effort, availability, customer impact, and business priorities when recommending actions. What You Will Bring • 5+ years of hands-on experience in Security Operations, Security Engineering, Detection Engineering, Incident Response, or related field. • Strong experience with SIEM operations, detection engineering, alert triage, investigation, and incident response. • Practical experience with vulnerability management, endpoint patching and hardening, CSPM/CWP, cloud security posture, or attack-surface analysis. • Experience with Azure, AWS, or comparable cloud environments; multi-cloud experience is a plus. • Strong understanding of identity and access risks, privileged activity, risky sign-ins, and cloud administration. • Understanding modern AI security risks, including prompt injection, indirect prompt injection, excessive agency, data leakage, tool misuse, and AI supply-chain risk. • Ability to query and analyze security data using KQL, SQL, or equivalent language. • Ability to automate using Python, PowerShell, JavaScript, or a comparable language, including API integration. • Experience with endpoint, email, SaaS, cloud, and identity security telemetry. • Strong technical writing and communication skills, including the ability to work with distributed, cross-functional teams. • Ability to work independently, make sound decisions under pressure, and manage competing priorities. Preferred Qualifications • Experience with Microsoft Sentinel, Microsoft Defender, Log Analytics, SOAR, or comparable platforms. • Familiarity with MITRE ATT&CK, Sigma, YARA, threat hunting, or detection testing. • Experience with infrastructure-as-code, CI/CD, containers, or Kubernetes security. • Experience securing LLMs, AI agents, MCP or plugin ecosystems, AI-enabled SaaS tools, or AI runtime environments is a plus. • Experience with endpoint security capabilities such as endpoint privilege management, privileged access workstations, application control, and other least-privilege or attack-surface-reduction measures. • Experience supporting SOC 2, ISO 27001, NIST, FedRAMP, or similar assurance requirements. • Relevant security certifications or equivalent practical experience. Success Measures • Improved detection coverage and alert quality across priority security signals. • Consistent, risk-based triage and remediation of vulnerability, endpoint patching, and CSPM/CWP findings, with measurable improvement in patch compliance and endpoint-hardening coverage. • Reduced time to detect, investigate, contain, and recover from security incidents. • Increased automation and reduced manual effort in recurring SecOps workflows. • Reliable operational metrics, current playbooks, and measurable improvement actions. • Strong execution across SecOps, Cloud Security, Identity and IT, AppSec, and Engineering teams. • AI tools and agent workflows operate with risk-based guardrails, auditable telemetry, actionable detections, and clear escalation paths. • Controlled AI pilots demonstrate the least privilege, sandboxing, human approval, and safe handling of sensitive data before wider rollout. #LI-TI1 Why Join Semperis? You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you. **Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days. Semperis is an equal opportunity employer and will not discriminate against an applicant or employee based on race, color, religion, creed, national origin or ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran or military status, genetic information, citizenship, marital status, or any other legally recognized protected basis under federal, state, or local law. The information collected by the Semperis application is solely to determine suitability for employment, verify identity, and maintain employment statistics. Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and/or other applicable state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Semperis. Please inform Semperis representative Anna Taylor, Director of Global Recruiting, if you need assistance completing this application or to otherwise participate in the application process.

Via is using technology to transform transportation around the world. From changing a single person’s daily commute to reducing humanity’s collective environmental footprint — we’ve got huge goals. As a Application Security Engineer at Via, you will be a key member of the team, responsible for ensuring the security of Via's applications throughout the software development lifecycle. You will work closely with development, operations, and product teams to identify and mitigate vulnerabilities, promote secure coding practices, and build a robust application security program. What You’ll Do: • Perform security assessments, including penetration testing, vulnerability scanning, and code reviews, to identify security weaknesses in applications. • Collaborate with development teams to remediate identified vulnerabilities and implement secure coding practices. • Define and implement application security testing strategies, including static analysis, dynamic analysis, and software composition analysis. • Use AI (LLMs, agents, MCP-based tooling) to improve AppSec work such as vulnerability triage, code review, remediation and detection, and set best practices for doing so safely. • Design and build security tooling and automation, such as CI/CD integrations, internal services and AI-assisted workflows. • Contribute to the development and maintenance of application security policies, standards, and procedures. • Research and evaluate new application security tools and technologies. • Monitor application security metrics and provide regular reports on the security posture of applications. • Participate in incident response activities related to application security. • Champion a security-first culture within the engineering organization. Who You Are: • A Bachelor's degree in Computer Science or a related field is a plus. • Minimum of 3 years of experience as an Application Security Engineer or a similar role. • Strong understanding of application security concepts, including OWASP Top 10, CWE Top 25, and SANS Critical Security Controls. • Experience with various application security testing tools and techniques (e.g., SAST, DAST, SCA). • Proficiency in at least one scripting language (e.g., Python, JavaScript, Ruby). • Experience with secure coding practices and vulnerability remediation. • Familiarity with CI/CD pipelines and DevOps practices. • Excellent communication and collaboration skills. • Ability to work independently and as part of a team. • Experience with cloud platforms (AWS is an advantage). Compensation and Benefits • Our product impacts millions of users around the world providing alternative transport solutions that are more: efficient and accessible, changing cities to make them greener. • Competitive compensation package which includes base salary and equity • Health insurance with a discount for family members • Hybrid work and a lovely office situated in the heart of TLV, in Midtown, close to the light rail and train station • Career development and growth opportunities • Other perks: Freefit and other sports lessons, 10bis/Cibus - you choose!, happy hours, team events, communities and many more benefits We’re Via, and we build technology that changes the way the world moves. We’re driven by a simple mission: to create modern and efficient public transportation systems that provide far greater access to jobs, healthcare, and education. With our best in class suite of products, we make transit thrive. Our teams of worldclass engineers, data-scientists, product managers, operations specialists, marketers, transit experts and more bring cutting-edge AI-powered software and innovative technology-enabled operations to our partners across the globe. Founded in 2012, Via builds solutions to digitize, automate, and enable data-driven decision making for entire transportation networks; fixed-route buses, microtransit, paratransit, school buses, autonomous vehicles, and more. If you’re excited to be at the forefront of modernizing the future of transportation, are up for solving tough problems, and willing to become/already are a transit nerd, we are the place for you. Even if your past experience doesn’t align perfectly with every qualification in the job description for this role, we encourage you to apply. You may be just the right candidate for this or other opportunities. Ready to join the ride? Via is an equal opportunity employer.

Description At UVeye, we're on a mission to redefine vehicle safety and reliability on a global scale. Founded in 2016, we pioneered the world's first fully automated suite of AI-powered vehicle inspection systems, combining computer vision, machine learning, and generative AI. With over $380M in funding and strategic partnerships with Toyota, Amazon, General Motors, JLR, Volvo, and Hertz, our technology is deployed across manufacturing plants, dealerships, wholesale auctions, fleets, and seaports worldwide. Named one of Fast Company's Most Innovative Companies of 2026, our 300+ global employees are solutions-oriented, accountable, and driven by one shared goal: making roads safer for everyone. We seek a dedicated and proactive Senior SecOps Engineer to join our InfoSec team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities. A day in the life and how you’ll make an impact: • Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools. • Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows. • Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring. • Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats. • Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization. • Work closely with stakeholders (CISO, COO, System Architects, DevOps, IT, Finance, HR, etc’) to identify requirements and prioritize security needs. • Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration. • Perform or manage penetration testing initiatives to identify security weaknesses. Requirements • 5+ years of experience in sec-ops positions with relevant certifications • Demonstrable experience working in IT, Networking, Infrastructure, DevOps environments • Deep understanding of cloud platforms (AWS, GCP) and their security best practices(CSPM, ASPM, DSPM). • Strong knowledge of cloud networking(VPC), firewalls, IAM roles, and encryption. • Familiarity with ISO 27001, SOC 2, GDPR, and other security and regulatory frameworks, as part of GRC. • Experience performing or overseeing penetration testing processes. • Experience working with Forensic & Threat Detection Tools such as AWS GuardDuty, Azure Sentinel, Splunk, Qradar, Arcsight, and other SIEM systems • Experience working with multiple EDR and XDR Tools (CS, SentinelOne, MS Defender, etc’) • Excellent verbal and written communication skills, capable of explaining technical security concepts to non-technical stakeholders. • Ability to think critically and act decisively under pressure. • Integration and project lead experience • Team player Why UVeye: • Pioneer Advanced Solutions: Harness cutting-edge technologies in AI, machine learning, and computer vision to revolutionize vehicle inspections. • Drive Global Impact: Your innovations will play a crucial role in enhancing automotive safety and reliability, impacting lives and businesses on an international scale. • Career Growth Opportunities: Participate in a journey of rapid development, surrounded by groundbreaking advancements and strategic industry partnerships. Check out our Life at UVeye page to learn more about the employee experience. UVeye is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.

Description #LI-Hybrid About DriveNets DriveNets is a leader in high-scale networking software for AI infrastructure and service providers. The company pioneered a disaggregated networking architecture that transforms the economics of large-scale networks while maximizing performance, utilization, and operational efficiency. DriveNets-powered networks are deployed by global leaders, including AT&T and Comcast, supporting more than 30% of total U.S. internet traffic. DriveNets AI Fabric delivers full-stack networking for AI infrastructures, providing the highest-performance, Ethernet-based alternative to InfiniBand. The solution is deployed by hyperscalers, NeoClouds, and enterprises worldwide. With over $1B raised, DriveNets continues to push the boundaries of modern networking infrastructure. Location: Ra'anana / Tel Aviv The Role: We are looking for a Senior Network & Security Engineer to join our dynamic IT team. • Design, deploy, and operate enterprise and datacenter network infrastructure. • Manage and troubleshoot LAN, WAN, WLAN, VPN, and security environments. • Configure and maintain routers, switches, firewalls, load balancers, and related infrastructure. • Design and implement scalable network architectures based on modern cloud and hyperscale principles. • Drive network automation using Python, Golang, Shell, or similar technologies. • Build and enhance self-service infrastructure platforms supporting engineering and lab environments. • Monitor network performance, availability, and security using automated monitoring and alerting systems. • Collaborate closely with Infrastructure, Security, and Engineering teams to implement security controls and best practices. • Participate in architecture reviews, capacity planning, disaster recovery, and operational excellence initiatives. • Mentor team members and contribute to technical leadership across Requirements • 5+ years of hands-on experience designing and operating enterprise or datacenter networks. • Strong expertise in routing and switching technologies. • Experience with network security technologies including firewalls, VPNs, IDS/IPS, and network segmentation. • Hands-on experience with BGP, OSPF, VLANs, VRFs, and modern networking concepts. • Experience with VXLAN, EVPN, MPLS, or similar overlay technologies – an advantage. • Experience with network automation and scripting (Python, Golang, Shell, or similar). • Strong troubleshooting and problem-solving skills. • Excellent communication and collaboration abilities. Preferred Experience • Fortinet, Cisco, Palo Alto, Arista, Juniper, or F5 technologies. • Datacenter and cloud-scale environments. • Kubernetes and container networking. • Infrastructure-as-Code and automation frameworks. • Network Access Control (NAC) and Zero Trust architectures. More About DriveNets Based in Israel with locations in Romania, US, India and Japan as well as extended teams, DriveNets operations cover more than twelve countries. With recognition by industry analysts and through partnerships with market leaders such as AMD, Broadcom, Dell and others, DriveNets is pushing market momentum, delivering the scale and efficiency that modern AI workloads demand. Visit our website: https://drivenets.com/company/

About Payoneer Founded in 2005, Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world’s underserved businesses to a rising global economy. We’re a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories. By taking the complexity out of the financial workflows–including everything from global payments and compliance to multi-currency and workforce management, to providing working capital and business intelligence–we give businesses the tools they need to work efficiently worldwide and grow with confidence. Role summary We are seeking an Application Security Engineer to join our Cyber Team in Payoneer. As an Application Security Engineer, you will be responsible for overall Application Security standards, guidelines, and requirements for different groups in Payoneer. Your expertise in secure architecture, design, and SSDLC will play a crucial role in ensuring the security of our products and the protection of our sensitive financial data. This is a strategic position that offers an opportunity to shape and drive the security initiatives of our cutting-edge fintech solutions. Glilot Hybrid Full-time What you’ll do: • Review and approve secure architecture designs for new features and use-cases for Payoneer customers, partners, integrators or in-house solutions, considering best practices, regulatory requirements and business objectives, as well as many AI initiatives and use-cases. • Collaborate with cross-functional teams (mainly R&D and DevOps/DevSecOps) to define security requirements and design robust security controls for systems, both on-prem and in the cloud. • Define CI/CD processes and gates, such as SAST, SCA, Secret scanning and image/containers scanning during CI and Runtime. • Provide technical guidance and expertise to internal teams in selecting and integrating in-house solutions or third-party vendors. • Stay up-to-date with the latest security technologies, threats, and trends, and provide recommendations for continuous improvement. • Serve as a subject matter expert on application security, providing guidance and mentorship to other teams in the company. • Optimizing AppSec processes and workflows through AI-powered tooling and automation. • Assist in creating or researching for security solutions – solving security challenges, both on-prem, in the cloud and in the AI domain. Who you are: • 4+ years of experience in cybersecurity, including at least 2 years of experience in Application Security \ Product Security. • In-depth understanding of CI/CD workflows and methodology (Azure DevOps and Github is an advantage). • Familiarity with AI/agentic architectures and the MCP, with hands-on experience building custom skills and agents for security use cases. • Excellent communication and collaboration skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders. • Multi-task skills: ability to work on multiple projects in parallel, providing application security support for different teams and initiatives in the company. Advantages: • Bachelor's degree in Computer Science, Information Security, or a related field. • Experience/familiarity (hands-on) with security tools integrated into our CI/CD and production environments such as SonarQube, Snyk, Wiz and others. • Strong knowledge with AWS, Azure and GCP as well as their associated security services and features. • Strong knowledge and experience with Kubernetes platform and services. • knowledge with Microsoft enterprise ecosystem, including Active Directory/Azure Entra ID, Office 365 APIs, Azure Cloud services. • Familiarity with GitHub and GitHub Actions, including experience working with CI/CD pipelines and source code management workflows. • Ability to read and review code, particularly in .NET, Node.js, and Python. • Additional skills related to Secure Software Development Lifecycle (SSDLC) and Application Security (AppSec) further enhance the candidate's value. These skills may include risk assessments, threat modeling, vulnerability assessments or penetration testing. • Experience in fintech or financial services industry. • Familiarity with regulatory requirements and compliance standards in the financial industry, such as PCI DSS, PSD2 and GDPR. #LI-AG2 The Payoneer Ways of Working Act as our customer’s partner on the inside Learning what they need and creating what will help them go further. Do it. Own it. Being fearlessly accountable in everything we do. Continuously improve Always striving for a higher standard than our last. Build each other up Helping each other grow, as professionals and people. If this sounds like a business, a community, and a mission you want to be part of, apply today. We are committed to providing a diverse and inclusive workplace. Payoneer is an equal opportunity employer, and all qualified applicants will receive consideration for employment no matter your race, color, ancestry, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law. If you require reasonable accommodation at any stage of the hiring process, please speak to the recruiter managing the role for any adjustments. Decisions about requests for reasonable accommodation are made on a case-by-case basis.

Job Description • Lead, mentor, and grow a team of JavaScript developers, fostering a culture of technical excellence, ownership, and continuous improvement. • Own the design, development, and maintenance of high-performance JavaScript applications and components focused on browser security. • Drive the team's technical roadmap and priorities in partnership with product managers, designers, and other stakeholders. • Conduct code and design reviews, set coding standards, and ensure quality, performance, and security best practices across the team's deliverables. • Manage team planning, task allocation, and delivery timelines while balancing hands-on contribution with leadership responsibilities. • Stay up to date with the latest browser security trends, vulnerabilities, and attack vectors to proactively guide the team in identifying and addressing potential threats. • Lead architecture and technical design discussions to drive forward-thinking solutions that meet current and future business needs. • Improve development processes, tools, and methodologies to enhance team productivity and efficiency. • Support team members' professional development through regular feedback, one-on-ones, and career growth planning. • Join sessions with customers for feedback and troubleshooting, gathering insights to enhance product functionality and address concerns. Qualifications • 8+ years of experience as a Software Developer. • 3+ years of experience leading or managing a software development team. • Coding experience in JavaScript and TypeScript. • BSc in Computer Science/Software Engineering or equivalent knowledge. • Strong problem-solving skills and the ability to analyze complex technical challenges in a fast-paced environment. • Proven ability to mentor engineers and drive team delivery. • Good communication and interpersonal skills. • Fluent English, verbal and written. Advantages: • Experience in React tools including React.js & Webpack. • Experience in client-side applications in Windows. • Experience in C#. • Experience in server-side development. • Experience in developing security products. • Experience in WASM.

Job Description • Lead the application security team, providing strategic direction and mentorship. • Develop and implement a comprehensive Secure Software Development Lifecycle (SSDLC) framework. • Oversee the integration of security practices into all phases of the software development lifecycle, including CI/CD guardrails. • Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities. • Collaborate with development teams to ensure secure coding practices and adherence to security standards, while maintaining developer productivity. • Implement and manage security automation tools and processes to enhance the efficiency of security operations. • Stay up-to-date on the latest security trends, vulnerabilities, and technologies to continuously improve our security posture. • Provide expert guidance on security architecture and design for new and existing applications. • Lead incident response efforts related to application security breaches and vulnerabilities. • Foster a culture of security awareness and continuous improvement within the organization. Qualifications • Bachelor's degree in Computer Science, Information Security, or a related field. • Minimum of 7 years of experience in application security, with at least 3 years in a leadership role. • Proven experience in implementing and managing SSDLC frameworks. • In-depth knowledge of security frameworks and methodologies. • Strong understanding of threat modeling methodologies, secure coding practices and common vulnerabilities (e.g., OWASP Top Ten). • Proficiency in programming languages such as Java, Python, C#, or similar. • Experience in implementing security tools and technologies such as ASPM, SAST, DAST in complex and high-scale environment. • Excellent communication and leadership skills, with the ability and passion to drive change across the organization. • Relevant certifications such as CISSP, CISM, or CSSLP are desirable. • Proven experience in a similar role at another leading software development company.