Security Engineer jobs in Israel

SUMMARY: We’re looking for a Senior Cloud Security Engineer to own the security of a large-scale data platform that processes billions of events for thousands of customers, where privacy is a core product commitment. You’ll own cloud security end to end, building the guardrails, automation and controls that make the secure path the default for every engineer. You’ll work closely with the infrastructure team who own the platform, and see your decisions go straight to production. RESPONSIBILITIES: • Own the security posture of our GCP and Kubernetes environments: IAM, network segmentation, workload hardening, and data access to BigQuery, Bigtable and other data stores, detecting and fixing cloud misconfigurations continuously and automating remediation wherever possible • Build secure-by-default foundations: hardened base images, secure Kubernetes configurations, and policy-as-code guardrails for Kubernetes and Terraform • Partner with engineering to embed security into CI/CD, with automated fixes and alerts instead of manual checklists • Own secrets and key management end to end, including rollout, rotation and access policy • Drive vulnerability management from discovery to fix, prioritizing by real exposure • Review new services and designs with practical, lightweight threat modeling • Lead security incidents from containment to post-mortem • Serve as the go-to security expert across R&D, mentoring engineers and helping teams adopt AI services safely REQUIREMENTS: • 6+ years in security, infrastructure, DevOps, or SRE, including 3+ years owning cloud security in production • Deep hands-on experience securing a major public cloud. We run on GCP; strong AWS or Azure engineers ramp quickly here. • Production Kubernetes security: RBAC, network policies, admission control, workload hardening • Terraform (or similar) plus Python or Go. You’ve built security automation, not just configured off-the-shelf tools. • Sound judgment on risk: you know when to block, when to guide, and when to accept AI FLUENCY & ENGINEERING EXCELLENCE: • Uses AI to scale security work in practice, e.g. LLM-assisted triage, generating and testing policy-as-code, or automating design reviews • Familiar with the security risks of LLM APIs and AI services in production, or eager to build that expertise NICE TO HAVE: • Application security or DevSecOps experience • Experience securing data platforms and enforcing data access governance • A background in DevOps, SRE or Platform engineering before moving into security WHY JOIN PLACER.AI? • Join a rocketship! We are pioneers of a new market that we are creating • Take a central and critical role at Placer.ai • Work with, and learn from, top-notch talent • Competitive salary • Excellent benefits • Hybrid NOTEWORTHY LINKS TO LEARN MORE ABOUT PLACER • Placer.ai's $100M round C funding (unicorn valuation!) • See our data in action at The Anchor • Placer.ai in the news • Video: About Placer for Commercial Real Estate • Video Playlist: Placer Brand & Explainer Videos Placer.ai is committed to maintaining a drug-free workplace and promoting a safe, healthy working environment for all employees. Placer.ai is an equal opportunity employer and has a global remote workforce. Placer.ai's applicants are considered solely based on their qualifications, without regard to an applicant's disability or need for accommodation. Any Placer.ai applicant who requires reasonable accommodations during the application process should contact Placer.ai's Human Resources Department to make the need for an accommodation known.

At Semperis, our mission is to be a Force for Good. Starting with being a great place to work. We believe that when people feel valued, supported, and empowered, they do their best work. That’s why we focus on creating an employee experience rooted in purpose, growth, and balance. Semperis has been recognized as one of America’s Fastest-Growing Cybersecurity Companies by the Inc. 5000, a DUNS 100 Top Startup to Work For, and a multi-year Inc. Best Workplace awardee. Semperis is looking for a hands-on Senior Security Operations Engineer who wants to do more than monitor alerts and hand off tickets. In this role, you will have the rare opportunity to identify security problems, understand their root causes, and work directly with the teams responsible for fixing them. You will strengthen Semperis’ threat detection, incident response, vulnerability management, and cloud security operations through a combination of investigation, engineering, and automation. You will design and tune detections, lead investigations and response efforts, prioritize and route vulnerabilities and CSPM/CWP findings, improve security telemetry, and build capabilities that reduce manual effort and help the organization respond faster. This is an engineering-focused SecOps role- not a traditional alert-monitoring position. You will be expected to turn operational insights into durable improvements: better detections, stronger controls, cleaner telemetry, streamlined workflows, and measurable risk reduction. You will work closely with Cloud Security, Identity and IT, AppSec, Product Engineering, Platform Engineering, GRC, and service owners to secure Semperis’ corporate and cloud environments. You will also help shape how Semperis secures AI-enabled tools, agents, and automation as they become part of the way we work. If you enjoy moving from signal to solution—and want the autonomy and cross-functional access to make security improvements stick—this role is built for you. What You Will Do Threat Detection and Incident Response • Operate and improve SIEM, EDR, cloud, identity, email, and security monitoring capabilities. • Develop and tune detection rules, analytics, dashboards, alert routing, and investigation playbooks. • Investigate security alerts and incidents, including scoping, evidence collection, containment, remediation coordination, and recovery tracking. • Support high-severity incident response and contribute to post-incident improvements. Vulnerability and Cloud Security Operations • Lead SecOps triage of vulnerability, exposure, endpoint patching, and CSPM/CWP findings across endpoints, third-party applications, cloud environments, and other technology assets. • Validate findings, assess risk using business and technical context, assign ownership, establish remediation priorities, track patching and other corrective actions, manage exceptions, and verify closure. • Partner with Cloud Security on posture-management rules, alert tuning, cloud logging, and recurring misconfiguration analysis. • Define monitoring and detection requirements for new cloud services, SaaS capabilities, and significant architecture changes. • Monitor privileged activity, develop detections for risky identity, endpoint, and cloud administration behavior, and support endpoint-hardening efforts focused on least privilege, reduce local-administrator access, and secure configuration. Automation, Metrics, and Engineering • Build scripts, integrations, workflows, and playbooks that improve triage, enrichment, notification, containment, remediation tracking, and reporting. • Monitor log-source and connector health and improve telemetry coverage across cloud, identity, endpoint, SaaS, and network sources. • Maintain metrics covering MTTD, MTTR, alert quality, incident trends, detection coverage, vulnerability risk, CSPM/CWP exposure, and remediation performance. • Maintain clear runbooks, technical documentation, and operational records. AI Security, Guardrails, and Monitoring • Assess AI tools, agents, plugins, and MCP integrations for data access, identity, execution, retention, and supply chain risk. • Design and operate guardrails for least-privilege identities, read-only-by-default connectors, sandboxed execution, network-egress restrictions, and human approval before irreversible actions. • Monitor prompts, retrieved content, model outputs, tool calls, agent actions, and administrative changes for prompt injection, indirect prompt injection, sensitive data exposure, unsafe code, abnormal behavior, and policy violations. • Onboard AI audit and runtime telemetry into the SIEM and build detections and response playbooks for rogue tools, connector misuse, suspicious tool calls, data exfiltration, and agent compromise. • Run controlled pilots and adversarial tests, measure false positives and user impact, and promote controls from monitor or flag to block based on evidence. Cross-Functional Security Engineering • Translate security findings into clear actions, owners, priorities, and deadlines. • Provide practical security guidance to engineering and IT teams. • Mentor analysts and engineers through technical reviews, incident walkthroughs, and knowledge sharing. • Balance risk, engineering effort, availability, customer impact, and business priorities when recommending actions. What You Will Bring • 5+ years of hands-on experience in Security Operations, Security Engineering, Detection Engineering, Incident Response, or related field. • Strong experience with SIEM operations, detection engineering, alert triage, investigation, and incident response. • Practical experience with vulnerability management, endpoint patching and hardening, CSPM/CWP, cloud security posture, or attack-surface analysis. • Experience with Azure, AWS, or comparable cloud environments; multi-cloud experience is a plus. • Strong understanding of identity and access risks, privileged activity, risky sign-ins, and cloud administration. • Understanding modern AI security risks, including prompt injection, indirect prompt injection, excessive agency, data leakage, tool misuse, and AI supply-chain risk. • Ability to query and analyze security data using KQL, SQL, or equivalent language. • Ability to automate using Python, PowerShell, JavaScript, or a comparable language, including API integration. • Experience with endpoint, email, SaaS, cloud, and identity security telemetry. • Strong technical writing and communication skills, including the ability to work with distributed, cross-functional teams. • Ability to work independently, make sound decisions under pressure, and manage competing priorities. Preferred Qualifications • Experience with Microsoft Sentinel, Microsoft Defender, Log Analytics, SOAR, or comparable platforms. • Familiarity with MITRE ATT&CK, Sigma, YARA, threat hunting, or detection testing. • Experience with infrastructure-as-code, CI/CD, containers, or Kubernetes security. • Experience securing LLMs, AI agents, MCP or plugin ecosystems, AI-enabled SaaS tools, or AI runtime environments is a plus. • Experience with endpoint security capabilities such as endpoint privilege management, privileged access workstations, application control, and other least-privilege or attack-surface-reduction measures. • Experience supporting SOC 2, ISO 27001, NIST, FedRAMP, or similar assurance requirements. • Relevant security certifications or equivalent practical experience. Success Measures • Improved detection coverage and alert quality across priority security signals. • Consistent, risk-based triage and remediation of vulnerability, endpoint patching, and CSPM/CWP findings, with measurable improvement in patch compliance and endpoint-hardening coverage. • Reduced time to detect, investigate, contain, and recover from security incidents. • Increased automation and reduced manual effort in recurring SecOps workflows. • Reliable operational metrics, current playbooks, and measurable improvement actions. • Strong execution across SecOps, Cloud Security, Identity and IT, AppSec, and Engineering teams. • AI tools and agent workflows operate with risk-based guardrails, auditable telemetry, actionable detections, and clear escalation paths. • Controlled AI pilots demonstrate the least privilege, sandboxing, human approval, and safe handling of sensitive data before wider rollout. #LI-TI1 Why Join Semperis? You’ll be part of a global team on the front lines of cybersecurity innovation. At Semperis, we celebrate curiosity, integrity, and people who take initiative. If you’re someone who sees the glass as half full, embraces challenges as growth opportunities, and values a healthy balance between work and life—we’d love to meet you. **Semperis maintains office locations in several cities across the globe. Where the job description specifies a required location, candidates will follow our hybrid work model. This includes working up to three days per week and remotely the remaining days. Semperis is an equal opportunity employer and will not discriminate against an applicant or employee based on race, color, religion, creed, national origin or ancestry, ethnicity, sex (including gender, pregnancy, sexual orientation, and gender identity), age, physical or mental disability, veteran or military status, genetic information, citizenship, marital status, or any other legally recognized protected basis under federal, state, or local law. The information collected by the Semperis application is solely to determine suitability for employment, verify identity, and maintain employment statistics. Applicants with disabilities may be entitled to reasonable accommodation under the Americans with Disabilities Act and/or other applicable state or local laws. A reasonable accommodation is a change in the way things are normally done which will ensure an equal employment opportunity without imposing undue hardship on Semperis. Please inform Semperis representative Anna Taylor, Director of Global Recruiting, if you need assistance completing this application or to otherwise participate in the application process.

Who We Are Hi, we're DuckDuckGo, the online protection company and remote-first team of 400+ on a mission to raise the standard of trust online. Founded in 2008 and profitable since 2014, our annual revenue is in the hundreds of millions USD and millions use our browser on Mac, Windows, iOS, and Android, our search engine, and the DuckDuckGo subscription. We also offer private, useful, and optional AI, including Duck.ai, which lets you chat privately with ChatGPT, Claude, and other AIs, all in one place. Our culture of trust, inclusivity, and empowered project management underpins everything we do, where each team member takes full ownership of their projects, from scoping and execution to postmortem. If you're seeking end-to-end ownership of your work, you've come to the right place! Your Team and Role Working on the Security Functional Team, you'll play a pivotal role in ensuring our security capabilities keep pace with our rapid product development, including our expanding AI offerings like Duck.ai and agentic browsing, directly protecting our users across all our products. You'll also maintain incident detection and response capabilities for the company, and work on related projects. Recent projects include: • SERP security mitigations • Agentic browsing security mitigations • Agentic browser hardening • Browser and sync security audits As a Senior Security Engineer, App Sec, you'll execute on SERP security mitigations (XSS prevention, tooling development to help engineers write safer code), manage application security scanning infrastructure setup, build and maintain harnesses that get security fixes out automatically, harden our agentic browsing and DuckAI experiences against emerging threats (like prompt injection), conduct browser and sync security audits (special pages, DuckAI integrations, password manager, etc.), deliver on internal red-team operations (simulated attack scenarios), support security triage, and more! About You • 7+ years of experience in web or application security (performing security assessments, vulnerability research, penetration testing, or secure code review) • Recent experience creating security focused agentic harnesses • Experience influencing large feature designs to have security baked in from the start • Advanced programming or scripting experience with JavaScript. Any additional experience with our stack is a bonus: Swift/Kotlin/C#/JavaScript (native apps) or JavaScript/Perl/Go (search). • An understanding of the web security model (such as the Same Origin Policy); experience with CSP, CORS, SameSite cookies, sec-fetch-*, CORB, CORP, Sanitizer API, and Trusted Types is beneficial • Hands-on experience identifying and exploiting web vulnerabilities (XSS, CSRF, injection attacks, authorization flaws, etc.) • Familiarity with security testing tools and frameworks • Experience partnering and collaborating with Product Engineers, advising on security matters and helping teams ship secure code faster • Experience shaping how an organisation thinks about security - driving best practices, improving processes, and raising the bar across teams Compensation Compensation is transparent across the organization, and all team members within the same professional level and global region receive the same compensation, plus stock options: • United States: $190,500 USD • United Kingdom: £134,600 GBP • Canada: CA$253,500 CAD • All other regions*: €157,350 EUR *Team members outside the US, UK and Canada are currently paid $178,500 USD. Pay converts to the EUR amount above on January 1, 2027 for Spanish team members, and approximately February 1, 2027 in all other regions. Eligibility for company-sponsored health benefits is limited to team members based in the United States. This program does not extend to team members located in other countries, such as Canada or the UK. Our Team Member Support Guide explains how we prioritize your wellbeing including paid parental leave, office setup, and co-working allowances. Hiring Process Hiring works best when it's a two-way street. Learn how we help you get to know DuckDuckGo, envision your future role here, and find out more about how we hire. Diversity, Equity and Inclusion DuckDuckGo provides equal work opportunities to all team members and applicants, and it prohibits discrimination and harassment of any type on the basis of race, color, ethnicity, caste, religion, age, sex (including pregnancy), national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by our policies or federal, state, or local laws. We want to ensure that our hiring process is accessible. If you need reasonable accommodation for any part of the application process because of a medical condition or disability, please send an email to [email protected] to let us know the nature of your request. Please note that: • You’ll be required to attend meetings on camera via video conferencing • Expect to travel at least two times a year: once for our all-hands meetup and again for a team retreat (each around 4-5 days). While extenuating circumstances may impact attendance, everyone is strongly encouraged to attend. • While we offer a flexible work arrangement with no core hours, expect an average full-time commitment of 40 hours per week. • A successful candidate must pass a background check as a condition of joining the team. • By applying for this role, you confirm that all information submitted is accurate and complete. You further acknowledge that providing false or fraudulent information during the application process is cause for denial of an offer, revocation of any existing offer, or other adverse action, up to and including termination after the start of your commencement of work. Disclosure Statement: Use of AI in Hiring Process As part of our commitment to enhancing our recruitment process, we utilize artificial intelligence (AI) technology to assist in reviewing and summarizing job applications and test projects, including those tools integrated into our recruitment vendor platforms. We use AI to flag potentially fraudulent applications, analyze and summarize applicants’ experience, interviews, and project performance, and help streamline our selection process. Key Principles: • Data Privacy: All information provided in your application will be handled in accordance with our Recruiting Privacy Policy. We ensure that your personal information is protected and used solely for recruitment purposes. • Human Oversight and Accountability: The AI technology is designed to support our hiring team by providing insights and summaries of applications and evaluations of test projects against scoring rubrics. All final evaluations and hiring decisions, however, will be made by our hiring team, who will consider the AI's input alongside other factors. • Transparency: We believe in transparency regarding our hiring practices. If you have any questions about how AI is used in our recruitment process, please feel free to reach out to us. By submitting your application, you acknowledge and consent to the use of AI technology in our review process. If you would like to request an alternative selection process, please contact us at [email protected]. Thank you for your interest in joining DuckDuckGo! #LI-DNI

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. Our team is looking for experienced, hands-on security practitioners, who will drive the adoption of modern security processes and tooling, with focus on automation and backed up by data-driven decisions. What you will do: • Secure cloud infrastructure supporting the ClickHouse products and services (AWS, GCP and Azure) • Collaborate with product and engineering teams to facilitate safe and secure use of public cloud infrastructure and resources • Develop and implement security systems (e.g. CSPM, infrastructure as code, secrets management) to secure and harden ClickHouse cloud infrastructure • Identify and respond to identified security issues, vulnerabilities, and incidents • Identify security gaps and vulnerabilities in ClickHouse assets • Develop processes, tooling and automation to scale security processes and mitigate risks to the business What you bring along: • Strong knowledge of and experience with multiple cloud service providers (AWS, GCP, Azure) • Experience securing large-scale customer-facing cloud infrastructures based on Kubernetes • Expertise in common cloud-based DevOps practices (e.g. CI/CD, infrastructure as code, secrets management) • Development and automation experience Bonus Points: • BS, MS, or PhD in Computer Science or related field • Previous contributions to open source projects • Security or cloud related certifications (AWS, GCP, Azure) #LI-JL1 Perks • Flexible work environment - ClickHouse is a globally distributed company and remote-friendly. We currently operate in over 25 countries. • Healthcare - Employer contributions towards your healthcare. • Equity in the company - Every new team member who joins our company receives stock options. • Time off - Flexible time off in the US, generous entitlement in other countries. • A USD$500 Home office setup if you’re a remote employee. • Global Gatherings – We believe in the power of in-person connection and offer opportunities to engage with colleagues at company-wide offsites. Culture - We All Shape It As part of a rapidly scaling start-up, you will be instrumental in shaping our culture. Are you interested in finding out more about our culture? Learn more about our values here. Check out our blog posts or follow us on LinkedIn to find out more about what’s happening at ClickHouse. Equal Opportunity & Privacy ClickHouse provides equal employment opportunities to all employees and applicants and prohibits discrimination and harassment of any type based on factors such as race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws. Please see here for our Privacy Statement.

We are looking for a highly skilled Senior Security Engineer to join our security team and lead initiatives across our corporate systems, cloud infrastructure, and AI-enabled environments. You will play a critical role in designing practical security controls, driving complex security projects, and fostering a culture of secure innovation as we scale. What you’ll do • Own security initiatives across corporate systems, endpoints, identities, SaaS, cloud, and internal infrastructure. • Design and implement practical security controls that reduce risk without slowing the business. • Own the security review and approval process for AI tools, AI-enabled applications, and autonomous agents across the organization. • Define security requirements and guardrails that enable teams to adopt AI securely. • Evaluate new technologies, integrations, and architectures and provide clear security recommendations. • Lead security projects from assessment and design through implementation and ongoing operation. • Work closely with IT, Infrastructure, DevOps, R&D, Legal, and business teams. • Investigate security issues and drive remediation. What you bring • Strong security mindset with a practical, hands-on approach. • Ability to take an ambiguous security problem, assess the risk, define a solution, and drive implementation. • Good understanding of modern enterprise, SaaS, cloud, and AI-enabled environments. • Ability to balance security requirements with business and engineering needs. • Strong analytical, troubleshooting, and communication skills. Technical skills • Identity and access management, SSO, MFA, privileged access, and least privilege. • Endpoint security, EDR, device hardening, and endpoint privilege management. • SaaS and cloud security, preferably AWS. • Network security and Zero Trust principles. • Security monitoring, logging, and incident investigation. • Security automation using scripting, APIs, or automation platforms. • Understanding of AI security risks, including data exposure, permissions, integrations, and autonomous agents. • Familiarity with application security and CI/CD security is an advantage. Experience • 7+ years of hands-on experience in security engineering, infrastructure security, cloud security, or a related security role. • Proven experience implementing and operating security controls in production environments. • Proven experience independently leading complex security initiatives across multiple technical teams. • Experience working with IT, Infrastructure, DevOps, or engineering teams. • Experience with SaaS, AI security, or emerging technology assessments is an advantage. Core attributes • Ownership and independence. • Strong problem-solving skills. • Practical security judgment. • Hands-on mentality. • Secure enablement mindset. • Strong collaboration and communication. • Curiosity and continuous learning. • Focus on execution and measurable security improvement. About MyHeritage MyHeritage is the leading global discovery platform for exploring family history. With billions of historical records and family tree profiles, and with sophisticated matching technologies that work across all its assets, MyHeritage gives users the joy of discovering their past and empowering their future. MyHeritage is the most popular DNA test and family history service in Europe. Since 2020, MyHeritage is also home to the world’s most advanced AI technologies for repairing, enhancing, colorizing, and animating historical photos. Learn more at www.myheritage.com. See what it’s like to work at MyHeritage on www.glassdoor.com. Benefits at MyHeritage Our employees enjoy a range of benefits to enhance work-life balance and well-being: • Hybrid work model • Modern, beautiful office in Or Yehuda with shuttle service from Tel Aviv and employee parking (for our Or Yehuda employees) • On-site gym and pilates classes • Dog-friendly office • Well-stocked kitchens and a monthly meal allowance • Fully funded supplemental health insurance #LI-Hybrid

Who is Eleos Health? The people who deliver care in our communities and homes do some of the most important work in healthcare. But too often, theyʼre asked to spend their time navigating paperwork, administrative burden, and problems they only discover after something has already gone wrong. Eleos exists to change that. Weʼre building the system of action for community-based care - helping behavioral health, hospice, home health, and other care teams spend less time reacting to problems and more time focused on the people they serve. Powered by our Polaris AI, Eleos works alongside clinicians and their teams to understand whatʼs happening across care in real time and take action before issues become problems, reducing administrative burden, protecting revenue and compliance, and giving care teams more time and capacity to deliver great care. Our vision is a world where care teams can stay one step ahead, rather than constantly catching up. Weʼre helping shift an entire industry from reactive to proactive, and we need talented people to help us get there. What is this opportunity? Senior Security Engineer to act as a hands-on technical leader inside our security org, part builder, part architect, part trusted partner to R&D. You'll sit in design reviews, push back (constructively) on architecture choices, prototype the controls we're missing, and help R&D ship faster and safer. This role suits an engineer who thinks in systems, codes when needed, and is energized by securing modern AI-driven, multi-cloud environments. What you'll do • Act as a security architect for new initiatives. Join design and solution-concept meetings with R&D before code is written and help shape architectures that are secure by default. Produce threat models, reference designs, and decision docs that engineers actually use. • Partner with R&D as a peer, not a gatekeeper. Embed with product and engineering teams. Translate security requirements into engineering language, and engineering trade-offs into risk language for leadership. • Own security across our multi-cloud footprint (AWS, GCP, Azure). Design and implement controls for identity, network, workload, and data protection that work consistently across environments. • Drive AI security. Build our defenses against threats specific to LLM and ML systems: prompt injection, model abuse, training-data integrity, agentic-workflow risks, MCP/tool-use exposure, secrets in prompts, and supply-chain risk in the AI stack. Help define what "secure AI development" means for us in practice. • Lead data security initiatives. Classification, encryption, key management, DLP, access governance, and data-flow mapping. • Evaluate and implement new technologies. Run POCs and deploy new tooling end-to-end. We expect you to have strong opinions on the security stack and to evolve it as the threat landscape shifts. • Write code. Automate controls, build internal tools, contribute to detection pipelines, and integrate security into CI/CD. What qualifications and skills will help you to be successful? Must-haves • 5+ years in security engineering, application security, or cloud security, with meaningful time in a hands-on technical capacity • Strong software development background — you've shipped production code and read others' code fluently. • Deep experience securing multi-cloud environments, including IAM, networking, workload security, and infrastructure-as-code • Architect-level thinking: ability to look at a system diagram and identify trust boundaries, blast radius, failure modes, and the controls that actually matter • Hands-on experience with data security at scale, classification, encryption, key management, access controls • Demonstrated experience introducing and operationalizing new security technologies, not just maintaining existing ones • Track record of working closely with engineering teams; you're comfortable in design reviews and code reviews • Direct experience with AI/ML security, securing LLM applications, agentic systems,model deployments, or AI infrastructure

Via is using technology to transform transportation around the world. From changing a single person’s daily commute to reducing humanity’s collective environmental footprint — we’ve got huge goals. As a Application Security Engineer at Via, you will be a key member of the team, responsible for ensuring the security of Via's applications throughout the software development lifecycle. You will work closely with development, operations, and product teams to identify and mitigate vulnerabilities, promote secure coding practices, and build a robust application security program. What You’ll Do: • Perform security assessments, including penetration testing, vulnerability scanning, and code reviews, to identify security weaknesses in applications. • Collaborate with development teams to remediate identified vulnerabilities and implement secure coding practices. • Define and implement application security testing strategies, including static analysis, dynamic analysis, and software composition analysis. • Use AI (LLMs, agents, MCP-based tooling) to improve AppSec work such as vulnerability triage, code review, remediation and detection, and set best practices for doing so safely. • Design and build security tooling and automation, such as CI/CD integrations, internal services and AI-assisted workflows. • Contribute to the development and maintenance of application security policies, standards, and procedures. • Research and evaluate new application security tools and technologies. • Monitor application security metrics and provide regular reports on the security posture of applications. • Participate in incident response activities related to application security. • Champion a security-first culture within the engineering organization. Who You Are: • A Bachelor's degree in Computer Science or a related field is a plus. • Minimum of 3 years of experience as an Application Security Engineer or a similar role. • Strong understanding of application security concepts, including OWASP Top 10, CWE Top 25, and SANS Critical Security Controls. • Experience with various application security testing tools and techniques (e.g., SAST, DAST, SCA). • Proficiency in at least one scripting language (e.g., Python, JavaScript, Ruby). • Experience with secure coding practices and vulnerability remediation. • Familiarity with CI/CD pipelines and DevOps practices. • Excellent communication and collaboration skills. • Ability to work independently and as part of a team. • Experience with cloud platforms (AWS is an advantage). Compensation and Benefits • Our product impacts millions of users around the world providing alternative transport solutions that are more: efficient and accessible, changing cities to make them greener. • Competitive compensation package which includes base salary and equity • Health insurance with a discount for family members • Hybrid work and a lovely office situated in the heart of TLV, in Midtown, close to the light rail and train station • Career development and growth opportunities • Other perks: Freefit and other sports lessons, 10bis/Cibus - you choose!, happy hours, team events, communities and many more benefits We’re Via, and we build technology that changes the way the world moves. We’re driven by a simple mission: to create modern and efficient public transportation systems that provide far greater access to jobs, healthcare, and education. With our best in class suite of products, we make transit thrive. Our teams of worldclass engineers, data-scientists, product managers, operations specialists, marketers, transit experts and more bring cutting-edge AI-powered software and innovative technology-enabled operations to our partners across the globe. Founded in 2012, Via builds solutions to digitize, automate, and enable data-driven decision making for entire transportation networks; fixed-route buses, microtransit, paratransit, school buses, autonomous vehicles, and more. If you’re excited to be at the forefront of modernizing the future of transportation, are up for solving tough problems, and willing to become/already are a transit nerd, we are the place for you. Even if your past experience doesn’t align perfectly with every qualification in the job description for this role, we encourage you to apply. You may be just the right candidate for this or other opportunities. Ready to join the ride? Via is an equal opportunity employer.

Our Purpose Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we’re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential. Title and Summary Security Engineering & Operations Team Lead Overview Mastercard Dynamic Yield is seeking an experienced Security Engineering & Operations Team Lead to lead the implementation and operation of security capabilities across our products, cloud platforms, software supply chain, and AI-enabled systems. This role combines our existing DevSecOps responsibilities with broader security engineering, cloud and application security, AI security, and security operations. You’ll lead a team responsible for embedding security into the engineering lifecycle, automating preventive and detective controls, strengthening our security posture, and supporting technical incident response. Working closely with Corporate Security, Product Security, Engineering, and DevOps, you’ll translate security requirements into scalable technical solutions that enable secure innovation and business growth. *Role* Lead a team of security engineers responsible for DevSecOps, security engineering, and security operations across production and engineering environments. Design, implement, and operate security controls across AWS, Kubernetes, applications, CI/CD pipelines, software dependencies, and AI-enabled systems. Drive application and software supply chain security, including vulnerability management, security scanning, secrets protection, and artifact integrity. Strengthen cloud security, identity and access management, data protection, network security, and runtime protection capabilities. Develop and operationalize AI security guardrails, monitoring, and secure integration patterns in partnership with Corporate Security. Lead or support security incident response, threat detection, investigation, containment, and recovery. Partner with Corporate Security, Product Security, and engineering teams on security architecture, threat modeling, risk remediation, and technical security assessments. Automate security controls and continuously improve security capabilities, operational effectiveness, and compliance evidence. Mentor and coach team members, fostering technical excellence, ownership, and professional growth. *Optimal Skills for Success* - At least 4 years of experience in a DevOps, DevSecOps, security engineering, or security operations leadership role, with a strong focus on production systems. - A degree in Computer Science or a related discipline, relevant military experience, or an equivalent technical background. - Proven experience securing and operating production environments on AWS, including cloud-native infrastructure and Kubernetes. - Strong understanding of application security, secure SDLC practices, software supply chain security, and vulnerability management. - Proficiency in one or more programming languages, such as Go, JavaScript, TypeScript, or Python, with experience automating security capabilities. - Experience with CI/CD platforms such as GitHub Actions, infrastructure as code such as Terraform or CloudFormation, and security tooling integration. - Familiarity with security monitoring, detection and response, incident management, and observability tools such as Prometheus and Grafana. - Understanding of identity and access management, encryption, secrets management, network security, and cloud security controls. - Ability to collaborate effectively with Corporate Security, Product Security, Engineering, DevOps, and other cross-functional teams. - Demonstrated leadership, project ownership, prioritization, and the ability to translate security requirements into practical, scalable engineering solutions. Join us at Mastercard Dynamic Yield to lead the evolution of our security engineering and operations capabilities, protect our products and infrastructure, and enable secure innovation across cloud, software, and AI. Corporate Security Responsibility All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must: • Abide by Mastercard’s security policies and practices; • Ensure the confidentiality and integrity of the information being accessed; • Report any suspected information security violation or breach, and • Complete all periodic mandatory security trainings in accordance with Mastercard’s guidelines.

Product Security Engineer We are looking for a Product Security Engineer to join Tipalti’s Product Security team and help strengthen security across our products and software development lifecycle. The role is hands-on and engineering-focused, working closely with development and product teams to identify security risks, improve application security, and implement practical security solutions throughout the development lifecycle. Why join Tipalti? Tipalti is the AI-powered platform for finance automation, elevating how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. Our platform provides a comprehensive suite of finance automation solutions designed for mid-market businesses across accounts payable, global payouts, procurement, employee expenses, corporate cards, supplier management, tax compliance, and treasury. Tipalti partners with leading financial institutions such as Citi, Wells Fargo, J.P. Morgan, and Visa, enabling over 5,000 global companies to efficiently and securely pay millions of suppliers and payees across 200+ countries and territories, in 120 currencies. At Tipalti, we pride ourselves on our collaborative culture, the quality of our product, and the capabilities of our people. Tipalti offers competitive benefits, a flexible workplace, career coaching, and an environment where diverse individuals can thrive and make an impact. Founded in Israel in 2010, Tipalti is a global business headquartered in the San Francisco Bay Area (Foster City), with offices in Tel Aviv, Plano, Toronto, Vancouver, London, Amsterdam, Tbilisi, and Medellin. In this role, you will be responsible for: • Work closely with development and product teams on application and product security throughout the software development lifecycle. • Perform hands-on security reviews of applications, APIs, services, and code. • Identify, investigate, validate, and assess product security vulnerabilities and security findings. • Provide practical remediation guidance and work with development teams through remediation. • Perform threat modeling and security analysis for new and existing product capabilities. • Work with application security tools and technologies including SAST, SCA, DAST, API Security, WAF, and related security controls. • Improve and automate Product Security processes, tooling, and security checks across the development lifecycle. • Assess security across modern application environments including web applications, APIs, microservices, containers, Kubernetes, and cloud-native services. • Support secure coding practices and provide practical security guidance to development teams. • Support vulnerability disclosure and Bug Bounty activities, including technical validation, risk assessment, and remediation follow-up. • Contribute to the continuous improvement of Product Security practices and capabilities across Tipalti’s engineering organization. About you • 3+ years of hands-on experience in Application Security, Product Security, or a closely related software security role. • Strong understanding of software development and the ability to read, understand, and review application code with .NET, JavaScript/TypeScript, or comparable modern technologies. • Hands-on experience identifying and analyzing application and API security vulnerabilities. • Experience performing threat modeling and application security reviews. • Strong understanding of authentication, authorization, session management, web security, API security and mobile security. • Strong knowledge of OWASP Top 10s and their practical remediation. • Hands-on experience with application security technologies such as SAST, SCA, DAST, API Security, WAF. • Experience with microservices, APIs, containers, Kubernetes, and cloud-native environments. • Knowledge of AWS security and/or Azure security. • Understanding of modern CI/CD and software development environments. • Strong analytical and problem-solving skills with the ability to turn security findings into practical technical recommendations. • Strong communication and collaboration skills and the ability to work effectively with engineering, product, and security teams. Advantage • Experience developing security tooling or automation. • Experience with CI/CD and software supply chain security. • Experience with fintech, payments, or security-sensitive SaaS products. • Experience with vulnerability research, Bug Bounty, or vulnerability disclosure programs. • Familiarity with AI/LLM application security, AI coding tools, MCP, or agentic systems. • Security research, open-source contributions, or other demonstrated hands-on security work. Our tech teams retain a fast-paced, start-up vibe that encourages innovation and critical thinking. At Tipalti, you’ll have the opportunity to work with a diverse, global team of engineers, developers, and product leaders who are collectively building the future of our best-in-class product suite as we transform financial operations for the future. About Our Tel Aviv Offices Hybrid Work Model - Tipalti offers a hybrid work model, with two days per week working from home and three days per week from our beautiful offices in North Tel Aviv. Shuttle Services - Shuttle services are available from the nearest train station and across Tel Aviv to the office. Parking - Parking is available for all employees. Snacks & Treats - Enjoy a selection of snacks and treats available on every floor. #LI-Hybrid Transparency Note: While you'll see three Product Security listings on our careers board, we are actually looking to fill a single open seat. The job descriptions are identical- only the seniority levels differ. We believe great talent comes in different shapes, and we value practical skills and capability over rigid experience requirements. Wherever you are in your career journey, if you have the right drive and expertise, feel free to apply to the level that fits you best- we’d love to hear from you. Our Mission Our mission is to elevate how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. We are the AI-powered platform that automates finance. Tipalti is fueled by a commitment to our customers and a desire to build lasting connections. Our client portfolio includes high-velocity businesses such as Amazon Twitch, GoDaddy, Roku, WordPress.com, and ZipRecruiter. We work hard for our 99% customer retention rate which is built on trust, reliability and innovation. Tipalti means we handled it" - a mission to which we are constantly committed. Accommodations Tipalti champions inclusive teams, in which every voice counts. We are committed to recruiting diverse candidates with varied personal experiences and abilities. We welcome applications from candidates belonging to historically underrepresented or disadvantaged groups, and maintain an equitable Talent Acquisition process that is free from discrimination. As an equal opportunities employer, Tipalti complies with employment and human rights laws across the various jurisdictions in which we operate. Should you require reasonable adjustments or accommodations during the recruitment process, including access to alternate formats of materials, meeting spaces, or other accommodations that could better enable your full participation, please reach out to [email protected] for assistance. AI Use We may use artificial intelligence and automated systems (collectively "AI") to screen, assess, and select candidates during our recruitment process. This includes resume screening, skills assessment, and candidate matching. You have the right to request human review of any automated decision. For more information about how we collect and use personal data and information during recruitment, please refer to our Job Candidate Privacy Notice. For additional questions about our use of AI during our recruitment process, you can contact [email protected]. Privacy We are committed to protecting the privacy interests of job applicants and candidates. For more information about our privacy practices during our Talent Acquisition process, please refer to our Job Candidate Privacy Notice below: Job Candidate Privacy Notice | Tipalti www.tipalti.com/privacy/job-candidate-privacy-notice/

Senior Cyber Security Engineer We seek a dynamic and experienced Cyber Security Engineer to join Tipalti! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference. In this role, you will be responsible for: Design, implement, and maintain security architectures and controls across the organization's Cloud, SaaS, AI, and Corporate environments. • Secure enterprise infrastructure by strengthening cloud security, protecting sensitive data, managing identity and access, and continuously improving the organization's security posture. • Deploy, operate, and optimize enterprise security technologies across Identity, Endpoint, Network, Email, Cloud, SaaS, Data Protection, and Security Operations domains. • Identify, prioritize, and remediate security risks, vulnerabilities, cloud exposures, and SaaS security findings. • Lead end-to-end security projects across multiple teams, collaborating with Engineering, DevOps, IT, and Security Operations to implement scalable security solutions and drive automation. • Support the secure adoption of AI technologies while ensuring security controls align with industry best practices and frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS Controls. About you: • 5+ years of Information Security experience, including 4+ years of hands-on Security Engineering experience implementing and operating enterprise security technologies across Identity, Endpoint, Network, Data Protection, and Secure Access domains (e.g., Firewalls, VPN, WAF, EDR/XDR, IDS/IPS, IAM, DLP, SIEM, and SASE). Must • 3+ years of IT Infrastructure or Systems Engineering experience, including Active Directory, Microsoft Entra ID, Microsoft 365, MDM, and enterprise networking. Must • Strong hands-on experience securing AWS, Azure, and GCP using modern Cloud Security platforms (e.g., CNAPP/CSPM), alongside modern SaaS environments. • Hands-on experience implementing and managing Identity & Access Management (IAM), including SSO, MFA, RBAC, PAM, Conditional Access, Zero Trust, and encryption. • Experience securing enterprise AI environments, including AI governance, security controls, and Model Context Protocol (MCP). Advantage • Familiarity with industry security frameworks, including ISO 27001, SOC 2, NIST CSF, CIS Controls, and MITRE ATT&C Nice to Have • Experience with scripting and automation using Python, PowerShell, Bash, or REST APIs to automate security processes and workflows. • Industry certifications such as CISSP, CEH, Security+, CCSP, GIAC, AWS Security Specialty, or equivalent. Why join Tipalti? Tipalti is the AI-powered platform for finance automation, elevating how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. Our platform provides a comprehensive suite of finance automation solutions designed for mid-market businesses across accounts payable, global payouts, procurement, employee expenses, corporate cards, supplier management, tax compliance, and treasury. Tipalti partners with leading financial institutions such as Citi, Wells Fargo, J.P. Morgan, and Visa, enabling over 5,000 global companies to efficiently and securely pay millions of suppliers and payees across 200+ countries and territories, in 120 currencies. At Tipalti, we pride ourselves on our collaborative culture, the quality of our product and the capabilities of our people. Tipaltians are passionate about the work they do, and keen to get the job done. Tipalti offers competitive benefits, a flexible workplace, career coaching, and an environment where diverse individuals can thrive and make an impact. Our culture ensures everyone checks their egos at the door and stands ready to reach for success together. Founded in Israel in 2010, Tipalti is a global business headquartered in the San Francisco Bay Area (Foster City) with offices in Tel Aviv, Plano, Toronto, Vancouver, London, Amsterdam, Tbilisi and Medellin. About Our Tel Aviv Offices Hybrid Work Model - Tipalti offers a hybrid work model, with two days per week working from home and three days per week from our beautiful offices in North Tel Aviv. Shuttle Services - Shuttle services are available from the nearest train station and across Tel Aviv to the office. Parking - Parking is available for all employees. Snacks & Treats - Enjoy a selection of snacks and treats available on every floor. #LI-Hybrid Our Mission Our mission is to elevate how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. We are the AI-powered platform that automates finance. Tipalti is fueled by a commitment to our customers and a desire to build lasting connections. Our client portfolio includes high-velocity businesses such as Amazon Twitch, GoDaddy, Roku, WordPress.com, and ZipRecruiter. We work hard for our 99% customer retention rate which is built on trust, reliability and innovation. Tipalti means we handled it" - a mission to which we are constantly committed. Accommodations Tipalti champions inclusive teams, in which every voice counts. We are committed to recruiting diverse candidates with varied personal experiences and abilities. We welcome applications from candidates belonging to historically underrepresented or disadvantaged groups, and maintain an equitable Talent Acquisition process that is free from discrimination. As an equal opportunities employer, Tipalti complies with employment and human rights laws across the various jurisdictions in which we operate. Should you require reasonable adjustments or accommodations during the recruitment process, including access to alternate formats of materials, meeting spaces, or other accommodations that could better enable your full participation, please reach out to [email protected] for assistance. AI Use We may use artificial intelligence and automated systems (collectively "AI") to screen, assess, and select candidates during our recruitment process. This includes resume screening, skills assessment, and candidate matching. You have the right to request human review of any automated decision. For more information about how we collect and use personal data and information during recruitment, please refer to our Job Candidate Privacy Notice. For additional questions about our use of AI during our recruitment process, you can contact [email protected]. Privacy We are committed to protecting the privacy interests of job applicants and candidates. For more information about our privacy practices during our Talent Acquisition process, please refer to our Job Candidate Privacy Notice below: Job Candidate Privacy Notice | Tipalti www.tipalti.com/privacy/job-candidate-privacy-notice/

Cyber Security Engineering Tech Lead We seek a dynamic and experienced Cyber Security Engineering Tech Lead to join Tipalti! This role presents an exciting opportunity to work in a fast-growing company with great opportunities to make a difference. In this role, you will be responsible for: Design, implement, and maintain security architectures and controls across the organization's Cloud, SaaS, AI, and Corporate environments. • Secure enterprise infrastructure by strengthening cloud security, protecting sensitive data, managing identity and access, and continuously improving the organization's security posture. • Deploy, operate, and optimize enterprise security technologies across Identity, Endpoint, Network, Email, Cloud, SaaS, Data Protection, and Security Operations domains. • Identify, prioritize, and remediate security risks, vulnerabilities, cloud exposures, and SaaS security findings. • Lead end-to-end security projects across multiple teams, collaborating with Engineering, DevOps, IT, and Security Operations to implement scalable security solutions and drive automation. • Support the secure adoption of AI technologies while ensuring security controls align with industry best practices and frameworks such as ISO 27001, SOC 2, NIST CSF, and CIS Controls. About you: • 6+ years of Information Security experience, including 4+ years of hands-on Security Engineering experience implementing and operating enterprise security technologies across Identity, Endpoint, Network, Data Protection, and Secure Access domains (e.g., Firewalls, VPN, WAF, EDR/XDR, IDS/IPS, IAM, DLP, SIEM, and SASE). Must • 3+ years of IT Infrastructure or Systems Engineering experience, including Active Directory, Microsoft Entra ID, Microsoft 365, MDM, and enterprise networking. Must • Strong hands-on experience securing AWS, Azure, and GCP using modern Cloud Security platforms (e.g., CNAPP/CSPM), alongside modern SaaS environments. • Hands-on experience implementing and managing Identity & Access Management (IAM), including SSO, MFA, RBAC, PAM, Conditional Access, Zero Trust, and encryption. • Experience securing enterprise AI environments, including AI governance, security controls, and Model Context Protocol (MCP). Advantage • Familiarity with industry security frameworks, including ISO 27001, SOC 2, NIST CSF, CIS Controls, and MITRE ATT&C Nice to Have • Experience with scripting and automation using Python, PowerShell, Bash, or REST APIs to automate security processes and workflows. • Industry certifications such as CISSP, CEH, Security+, CCSP, GIAC, AWS Security Specialty, or equivalent. Why join Tipalti? Tipalti is the AI-powered platform for finance automation, elevating how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. Our platform provides a comprehensive suite of finance automation solutions designed for mid-market businesses across accounts payable, global payouts, procurement, employee expenses, corporate cards, supplier management, tax compliance, and treasury. Tipalti partners with leading financial institutions such as Citi, Wells Fargo, J.P. Morgan, and Visa, enabling over 5,000 global companies to efficiently and securely pay millions of suppliers and payees across 200+ countries and territories, in 120 currencies. At Tipalti, we pride ourselves on our collaborative culture, the quality of our product and the capabilities of our people. Tipaltians are passionate about the work they do, and keen to get the job done. Tipalti offers competitive benefits, a flexible workplace, career coaching, and an environment where diverse individuals can thrive and make an impact. Our culture ensures everyone checks their egos at the door and stands ready to reach for success together. Founded in Israel in 2010, Tipalti is a global business headquartered in the San Francisco Bay Area (Foster City) with offices in Tel Aviv, Plano, Toronto, Vancouver, London, Amsterdam, Tbilisi and Medellin. About Our Tel Aviv Offices Hybrid Work Model - Tipalti offers a hybrid work model, with two days per week working from home and three days per week from our beautiful offices in North Tel Aviv. Shuttle Services - Shuttle services are available from the nearest train station and across Tel Aviv to the office. Parking - Parking is available for all employees. Snacks & Treats - Enjoy a selection of snacks and treats available on every floor. #LI-Hybrid Our Mission Our mission is to elevate how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. We are the AI-powered platform that automates finance. Tipalti is fueled by a commitment to our customers and a desire to build lasting connections. Our client portfolio includes high-velocity businesses such as Amazon Twitch, GoDaddy, Roku, WordPress.com, and ZipRecruiter. We work hard for our 99% customer retention rate which is built on trust, reliability and innovation. Tipalti means we handled it" - a mission to which we are constantly committed. Accommodations Tipalti champions inclusive teams, in which every voice counts. We are committed to recruiting diverse candidates with varied personal experiences and abilities. We welcome applications from candidates belonging to historically underrepresented or disadvantaged groups, and maintain an equitable Talent Acquisition process that is free from discrimination. As an equal opportunities employer, Tipalti complies with employment and human rights laws across the various jurisdictions in which we operate. Should you require reasonable adjustments or accommodations during the recruitment process, including access to alternate formats of materials, meeting spaces, or other accommodations that could better enable your full participation, please reach out to [email protected] for assistance. AI Use We may use artificial intelligence and automated systems (collectively "AI") to screen, assess, and select candidates during our recruitment process. This includes resume screening, skills assessment, and candidate matching. You have the right to request human review of any automated decision. For more information about how we collect and use personal data and information during recruitment, please refer to our Job Candidate Privacy Notice. For additional questions about our use of AI during our recruitment process, you can contact [email protected]. Privacy We are committed to protecting the privacy interests of job applicants and candidates. For more information about our privacy practices during our Talent Acquisition process, please refer to our Job Candidate Privacy Notice below: Job Candidate Privacy Notice | Tipalti www.tipalti.com/privacy/job-candidate-privacy-notice/

Senior Product Security Engineer We are looking for a Senior Product Security Engineer to join Tipalti’s Product Security team and help strengthen security across our products and software development lifecycle. The role is hands-on and engineering-focused, working closely with development and product teams to identify security risks, improve application security, and implement practical security solutions throughout the development lifecycle. Why join Tipalti? Tipalti is the AI-powered platform for finance automation, elevating how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. Our platform provides a comprehensive suite of finance automation solutions designed for mid-market businesses across accounts payable, global payouts, procurement, employee expenses, corporate cards, supplier management, tax compliance, and treasury. Tipalti partners with leading financial institutions such as Citi, Wells Fargo, J.P. Morgan, and Visa, enabling over 5,000 global companies to efficiently and securely pay millions of suppliers and payees across 200+ countries and territories, in 120 currencies. At Tipalti, we pride ourselves on our collaborative culture, the quality of our product, and the capabilities of our people. Tipalti offers competitive benefits, a flexible workplace, career coaching, and an environment where diverse individuals can thrive and make an impact. Founded in Israel in 2010, Tipalti is a global business headquartered in the San Francisco Bay Area (Foster City), with offices in Tel Aviv, Plano, Toronto, Vancouver, London, Amsterdam, Tbilisi, and Medellin. In this role, you will be responsible for: • Work closely with development and product teams on application and product security throughout the software development lifecycle. • Perform hands-on security reviews of applications, APIs, services, and code. • Identify, investigate, validate, and assess product security vulnerabilities and security findings. • Provide practical remediation guidance and work with development teams through remediation. • Perform threat modeling and security analysis for new and existing product capabilities. • Work with application security tools and technologies including SAST, SCA, DAST, API Security, WAF, and related security controls. • Improve and automate Product Security processes, tooling, and security checks across the development lifecycle. • Assess security across modern application environments including web applications, APIs, microservices, containers, Kubernetes, and cloud-native services. • Support secure coding practices and provide practical security guidance to development teams. • Support vulnerability disclosure and Bug Bounty activities, including technical validation, risk assessment, and remediation follow-up. • Contribute to the continuous improvement of Product Security practices and capabilities across Tipalti’s engineering organization. About you • 5+ years of hands-on experience in Application Security, Product Security, or a closely related software security role. • Strong understanding of software development and the ability to read, understand, and review application code with .NET, JavaScript/TypeScript, or comparable modern technologies. • Hands-on experience identifying and analyzing application and API security vulnerabilities. • Experience performing threat modeling and application security reviews. • Strong understanding of authentication, authorization, session management, web security, API security and mobile security. • Strong knowledge of OWASP Top 10s and their practical remediation. • Hands-on experience with application security technologies such as SAST, SCA, DAST, API Security, WAF. • Experience with microservices, APIs, containers, Kubernetes, and cloud-native environments. • Knowledge of AWS security and/or Azure security. • Understanding of modern CI/CD and software development environments. • Strong analytical and problem-solving skills with the ability to turn security findings into practical technical recommendations. • Strong communication and collaboration skills and the ability to work effectively with engineering, product, and security teams. Advantage • Experience developing security tooling or automation. • Experience with CI/CD and software supply chain security. • Experience with fintech, payments, or security-sensitive SaaS products. • Experience with vulnerability research, Bug Bounty, or vulnerability disclosure programs. • Familiarity with AI/LLM application security, AI coding tools, MCP, or agentic systems. • Security research, open-source contributions, or other demonstrated hands-on security work. Our tech teams retain a fast-paced, start-up vibe that encourages innovation and critical thinking. At Tipalti, you’ll have the opportunity to work with a diverse, global team of engineers, developers, and product leaders who are collectively building the future of our best-in-class product suite as we transform financial operations for the future. About Our Tel Aviv Offices: Hybrid Work Model - Tipalti offers a hybrid work model, with two days per week working from home and three days per week from our beautiful offices in North Tel Aviv. Shuttle Services - Shuttle services are available from the nearest train station and across Tel Aviv to the office. Parking - Parking is available for all employees. Snacks & Treats - Enjoy a selection of snacks and treats available on every floor. #LI-hybrid Transparency Note: While you'll see three Product Security listings on our careers board, we are actually looking to fill a single open seat. The job descriptions are identical- only the seniority levels differ. We believe great talent comes in different shapes, and we value practical skills and capability over rigid experience requirements. Wherever you are in your career journey, if you have the right drive and expertise, feel free to apply to the level that fits you best- we’d love to hear from you. Our Mission Our mission is to elevate how finance teams operate in the global economy. We empower our customers to scale faster and smarter by removing the complexities of doing global business and accelerating their finance operations efficiency. We are the AI-powered platform that automates finance. Tipalti is fueled by a commitment to our customers and a desire to build lasting connections. Our client portfolio includes high-velocity businesses such as Amazon Twitch, GoDaddy, Roku, WordPress.com, and ZipRecruiter. We work hard for our 99% customer retention rate which is built on trust, reliability and innovation. Tipalti means we handled it" - a mission to which we are constantly committed. Accommodations Tipalti champions inclusive teams, in which every voice counts. We are committed to recruiting diverse candidates with varied personal experiences and abilities. We welcome applications from candidates belonging to historically underrepresented or disadvantaged groups, and maintain an equitable Talent Acquisition process that is free from discrimination. As an equal opportunities employer, Tipalti complies with employment and human rights laws across the various jurisdictions in which we operate. Should you require reasonable adjustments or accommodations during the recruitment process, including access to alternate formats of materials, meeting spaces, or other accommodations that could better enable your full participation, please reach out to [email protected] for assistance. AI Use We may use artificial intelligence and automated systems (collectively "AI") to screen, assess, and select candidates during our recruitment process. This includes resume screening, skills assessment, and candidate matching. You have the right to request human review of any automated decision. For more information about how we collect and use personal data and information during recruitment, please refer to our Job Candidate Privacy Notice. For additional questions about our use of AI during our recruitment process, you can contact [email protected]. Privacy We are committed to protecting the privacy interests of job applicants and candidates. For more information about our privacy practices during our Talent Acquisition process, please refer to our Job Candidate Privacy Notice below: Job Candidate Privacy Notice | Tipalti www.tipalti.com/privacy/job-candidate-privacy-notice/

Description AudioCodes is looking for a hands-on IT Security and Network Engineer to join our global IT Infrastructure team. In this role, you will operate and improve our network and security environment, resolve technical issues, and support network and security changes across our global sites. Your mission • Operate, configure, and troubleshoot firewalls, switches, wireless networks, network access control (NAC), and remote access services. • Monitor network availability and security events, investigate issues, and work with internal teams and vendors to resolve them. • Plan and implement network and security changes while minimizing service disruption. • Handle and resolve network and security tickets and day-to-day operational tasks. • Maintain technical documentation, configurations, and operational procedures. • Support the investigation and mitigation of security incidents in coordination with the security team or the SOC. Requirements • 2+ years of hands-on experience in network and security operations. • Practical experience configuring and troubleshooting enterprise firewalls, switches, and VPN or remote-access solutions. • Strong understanding of TCP/IP, VLANs, routing, DNS, and network troubleshooting. • Experience with monitoring tools and using logs to diagnose network or security issues. • Ability to work independently, manage multiple tasks, and prioritize incidents. • Team player and a fast learner. • Clear communication skills and the ability to work effectively with technical teams and users. • Good written and spoken English. Advantages: • Experience with vulnerability management tools. • Experience supporting a global, multi-site environment. • Familiarity with Windows and Linux. • Relevant networking or security certifications.

Description About the Role We are looking for a hands-on Cyber Security Engineer to join our security team and help protect our organization across multiple layers of infrastructure and technology. In this role, you will be responsible for implementing, managing, and maintaining security controls across cloud and on-premises environments, networks, endpoints, applications, and data. You will work closely with the Security Architecture team, translating security standards and designs into effective operational controls. This is a highly practical role for someone who enjoys working with security technologies, solving real-world security challenges, responding to incidents, and continuously improving the organization's security posture. What you will be doing: Perimeter Security • Collaborate with the Security Architecture team to implement perimeter security controls designed to protect against unauthorized access and external threats. • Manage firewall policies and Web Application Firewalls (WAF) according to security architecture standards. • Operate security mechanisms designed to mitigate DDoS attacks and other external attack vectors. • Deploy and maintain cloud security guardrails and configurations across AWS, GCP, and Azure workloads. Network Security • Implement network segmentation and enforce security policies across internal systems in collaboration with the Security Architecture team. • Manage email security solutions and protocols to protect against phishing, spam, and malware. • Implement and maintain mobile security solutions to protect devices and corporate data. • Manage web proxy configurations to control and monitor internet traffic and ensure secure web usage. • Operate Intrusion Detection and Prevention Systems (IDS/IPS) to identify and respond to potential threats. • Manage network patching processes to ensure systems remain up to date and protected against known vulnerabilities. Endpoint Security • Implement and manage endpoint protection solutions to protect devices against malware, unauthorized access, and other threats. • Deploy and maintain Data Loss Prevention (DLP) and Endpoint Detection and Response (EDR) solutions in line with architectural standards. • Continuously assess and improve endpoint security posture and address identified vulnerabilities. Application Security & DevSecOps • Work with development teams and Security Architects to integrate security best practices throughout the Software Development Lifecycle (SDLC). • Conduct security reviews and implement safeguards across code repositories, CI/CD pipelines, and applications. • Help enforce secure coding practices and application security standards defined by the Security Architecture team. • Experience with GitLab, GitHub, Azure DevOps, Infrastructure as Code (IaC), Terraform, or CloudFormation is a plus. • Experience working in a DevSecOps environment is a plus. Data Security & Compliance • Implement encryption and data protection mechanisms to safeguard sensitive information. • Support compliance with relevant regulatory and industry standards, including GDPR, PCI-DSS, and ISO 27001. • Partner with the Compliance team on data security audits and implement preventive and corrective measures to reduce the risk of data leakage. SOC & Incident Response • Configure security alerts, monitoring scenarios, and detection mechanisms within SOC tools according to Security Architecture guidelines. • Support the execution of incident response plans and procedures, ensuring security incidents are addressed quickly and effectively. • Participate in root cause analysis following security incidents and implement remediation strategies. • Conduct regular security assessments, audits, and testing to maintain operational readiness and continuously strengthen security controls. Requirements Who we are looking for: • Bachelor's degree in Information Security, Computer Science, or a related field. • Strong hands-on experience implementing security controls across perimeter, network, endpoint, application, and data security. • Experience with at least one major public cloud platform: AWS, GCP, or Azure. • Proven experience in security operations and incident response. • Experience working with security technologies such as firewalls, WAF, DDoS protection, IDS/IPS, EDR, DLP, email security, and web proxies. • Good understanding of cloud security, network security, endpoint security, and application security. • Familiarity with regulatory requirements and security standards, including GDPR, PCI-DSS, and ISO 27001. • Experience with CI/CD, IaC, Terraform, CloudFormation, or DevSecOps is a plus. • Relevant certifications such as CISSP, CISM, or equivalent are a plus. • A hands-on, proactive approach with the ability to investigate security issues, work across teams, and turn security requirements into practical solutions. *Please provide an English CV with your application. What we offer: Our roles offer more than just a job; you’ll become part of the evoke family! We have created an environment where our people can thrive. Check out some of the fantastic benefits on offer: • Hybrid work model • Free parking in the building + free electric car charging • Broad collective health insurance (with options for family members and extensions) • Birthday gift + day off during your birthday month • Refer a friend - bonus or gift card • HitechZone membership • Gifts on holidays and life events • Ten Bis More about evoke We’re a business that embraces change and progress. The power behind big-name brands William Hill, 888 and Mr Green, evoke is the new name for 888 Holdings. Marking a new sense of purpose, direction and ambition for the business, there couldn’t be a more exciting time to join us as we accelerate our journey to bring even greater delight to our customers with world-class experiences. That’s the future. That’s evoke. At evoke, you’ll benefit from flexibility and a culture built on trust. We’ll give you the space to be yourself and the tools you need to protect our customers while they play. We’ll invest in your future to help you develop your unique strengths and build a career that’s right for you. Apply At evoke, we prioritize diversity, equity, and inclusion for the benefit of our company, employees, and communities. We foster a welcoming and safe workplace that values all forms of diversity and provides growth opportunities. Sounds good? Then you belong at our place! The first step in the recruitment process is kickstarting your application, followed by an initial screening call and an interview stage. Apply today to kickstart your application with evoke!

GitLab is the intelligent orchestration platform for DevSecOps. GitLab enables organizations to increase developer productivity, improve operational efficiency, reduce security and compliance risk, and accelerate digital transformation. More than 50 million registered users and more than 50% of the Fortune 100* trust GitLab to ship better, more secure software faster. The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software. *Fortune 500® is a registered trademark of Fortune Media IP Limited, used under license. Claim based on GitLab data. Fortune 100 refers to the top 20% ranked companies in the 2025 Fortune 500 list, published in June 2025. Fortune and Fortune Media IP Limited are not affiliated with, and do not endorse products or services of GitLab. An overview of this role As an Intermediate Software Engineer on GitLab’s Vulnerability Management team, you’ll help build the core security workflows that GitLab Ultimate customers use to triage, prioritize, and act on vulnerabilities. You’ll work primarily in Ruby on Rails on backend systems, including security dashboards, vulnerability reports, and ingestion pipelines. You’ll take ownership of well-defined projects, solve technical problems with support from experienced team members, and collaborate with other engineers. You’ll also have opportunities to contribute beyond the backend when the work requires it. You will join a fullstack team, working together with product managers, designers, and frontend engineers to solve problems across the Vulnerability Management domain. What you’ll do • Develop and maintain backend features for GitLab’s vulnerability management workflows. • Confidently ship features and improvements with minimal guidance and support from other team members; collaborate with the team on larger projects. • Help improve the performance, reliability, and scalability of security data ingestion and reporting systems. • Collaborate with frontend engineers and contribute across the stack when needed. • Work with engineers across security teams as vulnerability data and workflows come together in Vulnerability Management. • Collaborate with Product Management and Product Design to maintain a high bar for quality • Craft code that meets our internal standards for style, maintainability, and best practices for a high-scale web environment • Conduct code reviews within our Code Review Guidelines and ensure community contributions receive a swift response • Recognize impediments to our efficiency as a team ("technical debt"), propose and implement solutions • Participate in on-call rotations to assist troubleshooting product operations, security operations, and urgent engineering issues. What you’ll bring • Experience building and maintaining backend applications with Ruby on Rails. • Experience delivering and maintaining software systems as part of a larger engineering team. • The ability to investigate technical problems, ask for context when needed, and work toward a practical resolution. • Experience working with relational databases such as PostgreSQL. • Clear communication and collaboration skills in a distributed team. • An interest in learning from others, sharing knowledge, and growing your technical skills. • Frontend development experience, including JavaScript or Vue.js, is helpful. • Experience with Elasticsearch, graph databases, vulnerability management, application security, or related transferable skills is helpful. About the team The Vulnerability Management team develops the core security workflows that help GitLab customers triage and manage vulnerabilities. The team owns areas including the security dashboard, vulnerability reports, and ingestion pipelines, and serves as an important interface for security-related features across GitLab. The team is focused on moving beyond lists of findings toward workflows that help customers prioritize and coordinate remediation. You’ll collaborate asynchronously with a small, distributed group and with related security teams, including the Agentic Security Flows team. How GitLab Supports Full-Time Employees • Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave Please note that we welcome interest from candidates with varying levels of experience; many successful candidates do not meet every single requirement. Additionally, studies have shown that people from underrepresented groups are less likely to apply to a job unless they meet every single qualification. If you're excited about this role, please apply and allow our recruiters to assess your application. Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process. Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us. GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.

As a Senior Enterprise Security Engineer, you will be a foundational architect of Navan’s security posture, directly safeguarding our corporate infrastructure, sensitive financial data, and global user base. This is a highly hands-on, configuration-driven role that requires working directly with systems that power our security program in a modern, cloud-native environment. Your work will be critical in ensuring Navan becomes globally recognized for secure, unparalleled corporate travel and expense management. What You’ll Do: • Vulnerability Management & Exposure Reduction: Architect, manage, and scale the end-to-end vulnerability management program. Oversee continuous asset discovery, vulnerability scanning, threat exposure assessment, and risk-based prioritization (CVSS, EPSS, threat intelligence). Partner closely with infrastructure, engineering, and IT teams to establish SLAs, streamline patch management workflows, and validate effective remediation. • Security Incident Response & On-Call Rotation: Participate in the security engineering on-call rotation. Serve as a responder responsible for identifying, scoping, triaging, managing, and mitigating security incidents, followed by leading thorough post-incident reviews and root-cause analyses. • Detection & Automation Optimization: Help improve and maintain our existing detection pipeline by providing feedback on alert quality, reviewing current monitoring coverage, and performing direct tuning in SIEM platforms to reduce noise and increase signal fidelity. Evaluate existing SOAR playbooks and workflows, offering recommendations and performing targeted updates to streamline response processes. • Identity Governance & Access Control: Define and enforce strong IAM principles (e.g., Least Privilege, Zero Trust) and contribute to identity governance platforms to ensure secure authentication, authorization, and access across the enterprise. • Email Security: Strengthen email security by managing alerts and workflows in platforms like Material Security, reviewing post-delivery threats, and improving automated response to suspicious messages and mailbox activity. • Cross-Functional Security Leadership: Proactively partner with Engineering, IT, and Compliance teams to embed security best practices early in the lifecycle, align vulnerability SLAs with business risk objectives, and foster a culture of shared security ownership. • Process Improvement & Metrics: Establish and track key performance indicators (KPIs) for vulnerability management and incident response. Participate actively in incident and posture reviews, drive continuous operational improvements, and work with external vendors to align system capabilities and security expectations. What We’re Looking For: • 5+ years of hands-on experience in information or enterprise security, preferably within a high-growth tech environment utilizing cloud infrastructure. • Proven track record of designing, implementing, or maturing an enterprise-wide Vulnerability Management program, including expertise with modern exposure management and scanning platforms (e.g., Tenable, Qualys, Rapid7, Wiz) and vulnerability remediation workflows. • Demonstrated experience in incident response, with a willingness to participate in an on-call rotation to identify, analyze, contain, and resolve active security incidents. • Deep, up-to-date knowledge of modern attacker tactics, techniques, and procedures (TTPs), common exploit vectors, and risk prioritization frameworks (CVSS, EPSS, KEV). You excel at translating technical vulnerabilities and risks into clear business context for a range of stakeholders. • Ability to review SIEM and EDR/XDR platform outputs, provide constructive feedback on detection efficacy, and execute direct rule tuning and configuration refinements to optimize signal-to-noise ratio. • Comfort interfacing with SOAR workflows (e.g., Phantom, Demisto, XSOAR) to suggest optimizations and perform light playbook updates that improve overall team efficiency. • Demonstrated expertise in Zero Trust principles, modern identity governance, and access management solutions (e.g., Okta, Ping, or Azure AD). • Experience managing email security using platforms like Material Security, including reviewing post-delivery detections and analyzing mailbox activity. • Highly collaborative with strong ownership skills, adept at negotiating SLA timelines with engineering/IT partners and contributing actively within a small, focused security team. Navan uses AI-assisted Automated Employment Decision Tool (Metaview) to assist with evaluating resumes against job qualifications for this role. All final decisions are made by human recruiters and hiring managers. Human oversight: Metaview does not automatically reject candidates or make final hiring decisions. Our recruiters and hiring managers review all outputs and make the final hiring decision regarding every application. • Your rights: If you prefer to have your application reviewed without AI assistance, you may request a human evaluation by entering your email here. Your decision to do so will not affect how your candidacy is evaluated. Please refer to our Candidate Privacy Notice for more information about our processing of personal data, and your rights.

Location: Kfar Saba, IL (hybrid) ERGO NEXT's mission is to help entrepreneurs thrive. We’re doing that by building the only technology-led, full-stack provider of small business insurance in the industry, taking on the entire value chain and transforming the customer experience. Simply put, wherever you find small businesses, you’ll find ERGO NEXT. Since 2016, we’ve helped hundreds of thousands of small business customers across the United States get fast, customized and affordable coverage. We’re backed by industry leaders in insurance and tech, and we still have room to grow — that’s where you come in. As a fast-growing, cloud-native company, we aren't just protecting our infrastructure,we are building the security foundation that enables our scale. To drive this vision, our Security Engineering team operates at the absolute forefront of the field, embedding secure-by-design capabilities directly into our engineering DNA. We are looking for a Security Engineering Tech Lead to shape our long-term strategy, advance our automation, and deepen developer trust across the organization. This is a rare opportunity to directly influence the technical direction of a high-scale platform while mentoring a talented team of engineers, without losing your hands-on edge. What You’ll Do: • Shape and execute our cloud-native security strategy, serving as the technical lead for AWS, Kubernetes, and IAM architecture. • Partner closely with Platform Engineering to build reusable security capabilities into the engineering platform. • Scale our security posture by engineering self-service guardrails and automated controls that allow product teams to ship faster, safely. • Standardize security patterns and reference architectures that enable cross-organization scalability while reducing friction for engineering teams. • Drive secure adoption of AI-assisted development, agentic workflows, and developer productivity platforms. • Elevate the team's technical maturity by mentoring engineers, refining design reviews, and fostering a culture of security ownership. What We Need: • 7+ years in security engineering, cloud security, or a related technical security role • At least 2 years in a tech lead, staff-level, or mentorship capacity • Strong hands-on AWS security experience across IAM, networking, workload security, logging, monitoring, and cloud-native services. • Strong Kubernetes and containerized environment security knowledge • Experience with IaC, CI/CD security, distributed systems, identity, and access control • Ability to review technical designs and provide clear, practical security guidance • Strong communication skills in Hebrew and English • Proven track record of influencing stakeholders and cross-functional teams. • Demonstrated ability to lead complex technical initiatives across multiple engineering teams. Preferred Qualifications • Experience with AI, LLM, MCP, or agentic development environments. • Background in security automation, internal security platforms, or developer-facing tooling • Experience with threat modeling, security architecture, or secure design programs • Scripting or coding experience in Python, Go, or similar • Experience designing and building security automation or internal security platforms at scale. Note on Fraudulent Recruiting We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of ERGO NEXT Insurance. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers. Please note, we do not ask for sensitive information via chat, text, or social media, and any email communications will come from the domain @next-insurance.com or @nextinsurance.com. Additionally, Next Insurance will never ask for payment, fees, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via the careers page on our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations. If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Next Insurance, please do not provide any personal or financial information. You can find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission's website (https://consumer.ftc.gov/articles/job-scams), or you can contact your local law enforcement agency. Don’t meet every single requirement? Studies have shown that some underrepresented people are less likely to apply to jobs unless they meet every single qualification. At ERGO NEXT, we are dedicated to building a diverse, inclusive and respectful workplace, so if you’re excited about this role but your past experience doesn’t align perfectly with every qualification in the job description, we encourage you to apply anyways. You may be just the right candidate for this or other roles. One of our core values is 'Play as a Team'; this means making sure everyone has an equal chance to participate and make a difference. We win by playing together. ERGO Next Insurance is an equal opportunity employer and prioritizes building a diverse and inclusive workplace. We provide equal employment opportunities to all employees and applicants of any type and do not discriminate based on race, color, religion, national origin, gender, age, sexual orientation, physical or mental disability, genetic information or characteristic, gender identity and expression, veteran status, or other non-job-related characteristics or other prohibited grounds specified in applicable federal, state, and local laws. ERGO Next's policy is to comply with all applicable laws related to nondiscrimination and equal opportunity and will not tolerate discrimination or harassment based on any of these characteristics. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Fullpath by Cox Automotive is a fast-growing tech company in the automotive space with hubs across the US and Israel. We are disrupting the multi-trillion-dollar transportation industry with our advanced Customer Data Platform (CDP). Our work happens in the fast lane as we bring AI-powered, data-driven solutions to a quickly evolving industry. Our team at Fullpath is made up of curious and creative individuals who are always looking to achieve the impossible. We are bold, collaborative, and goal-driven. At our core, we believe every voice has value and can impact our bottom line. We are looking for an AI AppSec Engineer to join our team and make a real impact on our Secure Software Development Lifecycle! As an AI AppSec Engineer your mission will be to be the driving force behind our secure development lifecycle. You won't just find bugs; you will help build the systems that prevent them. You will have the opportunity to help navigate the "Agentic Era" by building autonomous security guardrails, securing LLM-based workflows, and empowering developers to move fast without breaking security. You will also be responsible for working closely under the AppSec Architect. This role is based out of our Tel-Aviv site and will report to the AppSec Architect. What you will be responsible for Build & automate: Develop and maintain internal security tooling, automated workflows, and AI security agents. Code integrity: Execute secure code reviews and provide actionable remediation guidance to engineering teams. Vulnerability management: Lead the tracking, triaging, and reporting of security flaws across all product lines. Best practice advocacy: Drive the adoption of secure coding standards, partnering with R&D and DevOps teams to embed security early and often. Extend our D&R capabilities: Build scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents. Document: Draft requirement documents for security products and innovative technologies. Requirements 2-4 years experience as an Application Security Engineer or similar role from a Software Development Company In-depth knowledge in threat modeling, risk management, and security controls. Experience with AI Security and Security AI. Proficiency with OWASP Top 10: API, LLM, and Agentic applications. Hands-on competency integrating security tools such as SAST, DAST, SCA, and API security testing. Familiarity with CI/CD pipelines and Infrastructure as Code implementation. Practical background in software development and coding. In-depth knowledge of cloud technologies and cloud-native applications, AWS and GCP. Cybersecurity certifications such as OSCP, GPEN, CSSLP. The top candidate will also have Endless curiosity and passion for emerging technology Ability to handle prioritize and execute multiple tasks simultaneously. Ability to work collaboratively across multiple departments. Fluent in English - ability to lead meetings and present. Strong communication and collaboration skills. Why you should join us Our global team is made up of awesome forward thinking, innovative go-getters. Learning and growth opportunities within a fast-paced tech startup environment. Clear career advancement path for strong performers. We are committed to setting each other up for success. As a member of our team, you will work within an environment that encourages growth, initiative taking and continuous mutual feedback in order to reach your full potential. And of course, Wolt+ and lots of yummy treats in the kitchen :-) Does this sound like a perfect position for you or a friend? apply here: [email protected]

Description Papaya Global is a rapidly growing, award-winning B2B tech unicorn with an ambitious mission to revolutionize the payroll & payments industry. With over $400M raised from multiple tier-one investors, our innovative technology provides a comprehensive solution for managing global workforces, encompassing everything from hiring and onboarding to managing and paying employees in over 160 countries. About the job We are looking for a SecOps Engineer to join our cybersecurity team. In this role, you will help defend the organization end-to-end across cloud, endpoints, identities, and applications while building and maturing our security operations capability. You will work across SIEM and telemetry, detection engineering, alert investigation, threat hunting, digital forensics and incident response, threat intelligence, and response automation. You will partner closely with IT, DevOps, Application Security, R&D, and business stakeholders to turn security signals into effective action and lasting improvements. This is a hands-on role for someone who enjoys investigating complex problems, improving controls, and building repeatable security operations in a growing environment. The role may participate in an on-call rotation and occasional after-hours incident response as required. Responsibilities • Operate and improve the security operations stack — SIEM, identity, endpoint, cloud, and application telemetry — including log source onboarding, health monitoring, and coverage-gap remediation. • Investigate security alerts and threats through triage, host and artifact analysis, DFIR, and threat hunting. • Lead incident response from detection through containment, recovery, and post-incident review. • Build and tune detection rules, SIEM queries, and dashboards for high-risk attack paths, and convert threat intelligence into new detections, hunts, and control improvements. • Automate response and enrichment workflows by using AI tools, scripting (Python, Bash, PowerShell), or SOAR tools to cut response time, and report incident metrics — root cause, impact, and remediation status. • Support security reviews of vendors, SaaS platforms, and internal applications, and partner with engineering to validate whether existing controls detect and mitigate relevant threats. • Support security monitoring and response for AI-enabled workflows and artifacts where applicable, including agentic tooling, integrations, and related operational risks. • Use AI-assisted triage and anomaly-detection models to prioritize alerts and cut time-to-detect across SIEM and endpoint telemetry. • Develop agentic workflows to speed up evidence correlation, RCA, timeline reconstruction, and case write-ups during investigations. • Evaluate AI agentic investigation tools for accuracy and performance and use the results to fine-tune and further enhance the automated playbooks. Requirements • 3+ years of hands-on experience in security operations, incident response, detection engineering, or a similar cybersecurity role. • Strong practical experience with IT security, endpoint protection, identity security, and security operations. • Hands-on experience with SIEM platforms, including alert triage, investigation, query development, dashboards, and detection tuning. • Solid understanding of cloud security and practical experience with one or more major cloud platforms, including identity, logging, network, and workload security concepts. • Experience with incident response and DFIR workflows, including host-based and artifact analysis on Windows, Linux and macOS. • Proficiency in Python, Bash, PowerShell, or similar scripting languages for automation and operational tooling. • Familiarity with SOAR platforms, automated playbooks, alert enrichment, and response workflows. • Strong written and verbal communication skills, with the ability to collaborate across DevOps, IT, R&D, security, and business teams. • Ability and willingness to participate in occasional after-hours response when required by a material security incident. • Strong familiarity with AI tools and experience putting them to work in security investigations. Nice to have • Experience building detections and incident-response capability in a growing or cloud-native organization. • Experience with threat hunting, malware analysis, host forensics, and mapping activity to common adversary tactics, techniques, and procedures. • Experience with containerized or cloud-native architectures, identity providers, and modern endpoint security platforms.

Description At UVeye, we're on a mission to redefine vehicle safety and reliability on a global scale. Founded in 2016, we pioneered the world's first fully automated suite of AI-powered vehicle inspection systems, combining computer vision, machine learning, and generative AI. With over $380M in funding and strategic partnerships with Toyota, Amazon, General Motors, JLR, Volvo, and Hertz, our technology is deployed across manufacturing plants, dealerships, wholesale auctions, fleets, and seaports worldwide. Named one of Fast Company's Most Innovative Companies of 2026, our 300+ global employees are solutions-oriented, accountable, and driven by one shared goal: making roads safer for everyone. We seek a dedicated and proactive Senior SecOps Engineer to join our InfoSec team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities. A day in the life and how you’ll make an impact: • Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools. • Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows. • Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring. • Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats. • Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization. • Work closely with stakeholders (CISO, COO, System Architects, DevOps, IT, Finance, HR, etc’) to identify requirements and prioritize security needs. • Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration. • Perform or manage penetration testing initiatives to identify security weaknesses. Requirements • 5+ years of experience in sec-ops positions with relevant certifications • Demonstrable experience working in IT, Networking, Infrastructure, DevOps environments • Deep understanding of cloud platforms (AWS, GCP) and their security best practices(CSPM, ASPM, DSPM). • Strong knowledge of cloud networking(VPC), firewalls, IAM roles, and encryption. • Familiarity with ISO 27001, SOC 2, GDPR, and other security and regulatory frameworks, as part of GRC. • Experience performing or overseeing penetration testing processes. • Experience working with Forensic & Threat Detection Tools such as AWS GuardDuty, Azure Sentinel, Splunk, Qradar, Arcsight, and other SIEM systems • Experience working with multiple EDR and XDR Tools (CS, SentinelOne, MS Defender, etc’) • Excellent verbal and written communication skills, capable of explaining technical security concepts to non-technical stakeholders. • Ability to think critically and act decisively under pressure. • Integration and project lead experience • Team player Why UVeye: • Pioneer Advanced Solutions: Harness cutting-edge technologies in AI, machine learning, and computer vision to revolutionize vehicle inspections. • Drive Global Impact: Your innovations will play a crucial role in enhancing automotive safety and reliability, impacting lives and businesses on an international scale. • Career Growth Opportunities: Participate in a journey of rapid development, surrounded by groundbreaking advancements and strategic industry partnerships. Check out our Life at UVeye page to learn more about the employee experience. UVeye is an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran, or disability status.