We are seeking a highly skilled and hands-on Application Security Lead to take ownership of our product and infrastructure security. Reporting directly to the CISO with a dotted line to the CTO, you will act as the critical bridge between our Security and Engineering teams, driving a robust "security-first" culture.



While this role encompasses both application and infrastructure security, our primary focus is on the Application Security domain. You will lead our transition towards a mature DevSecOps organization, ensuring that security is seamlessly embedded into every phase of our SDLC without compromising delivery speed.

Key Responsibilities

Application Security & Secure Engineering

Secure SDLC Integration: Embed security practices throughout the entire SDLC, from initial design and planning to deployment and maintenance.
Threat Modeling & Architecture: Lead threat modeling (e.g., STRIDE) and architectural reviews for high-risk features like authentication, PII, and payments.
AppSec Tooling & Automation: Integrate and manage automated security scanning (SAST, SCA, DAST) within CI/CD pipelines to ensure code integrity seamlessly.
Mobile & API Security: Enforce least-privilege models for API configurations. Lead security initiatives specifically tailored to mobile environments (iOS/Android), protecting core mobility platform.
Offensive Security & Pentesting: Orchestrate internal red teaming and external penetration tests for web and mobile applications. Manage Vulnerability Disclosure Programs (VDP) / Bug Bounties.
Developer Empowerment & DevEx: Collaborate with developers to provide automated tools, coding guidelines, and frictionless guardrails for secure-by-design development, ensuring security acts as an enabler, not a blocker.
Incident & Vulnerability Management: Act as the technical escalation point for application security incidents, leading detection and recovery efforts, while prioritizing vulnerabilities across the product suite for timely remediation.
Cloud & Infrastructure Security

Cloud & Network Posture: Manage cloud security posture (CSPM) across AWS/GCP and oversee broad network security measures, including WAF, Bot management, and environment segmentation.
Pipeline & Secrets Management: Secure the CI/CD infrastructure against tampering and enforce robust secret management and secure repository controls across the organization.
Resilience & Recovery: Manage disaster recovery (DR) and business continuity planning for production environments.
Governance, Culture & Compliance

DevSecOps Strategy: Lead the strategic evolution of DevOps into a mature DevSecOps model, aligning with industry frameworks like OWASP SAMM and NIST SSDF.
Metrics & Measurement: Define and track key security metrics (e.g., MTTR, vulnerability density) to measure and improve program effectiveness.
Security Champions: Build and mentor a Security Champions program within R&D to scale security knowledge and foster a grassroots culture.
Compliance & Privacy: Ensure continuous compliance with PCI-DSS, ISO27001, and GDPR, championing privacy-by-design principles across all user data and R&D operations.

We are seeking a highly skilled and experienced Head of Application Security to join our dynamic team. This role is pivotal in driving the security of our software development lifecycle and ensuring the robustness of our applications against potential threats. The ideal candidate will have a strong background in secure software development practices, including SSDLC implementation, and a deep understanding of security risks & tools. This position reports directly to an R&D VP.
Key Responsibilities
Lead the application security team, providing strategic direction and mentorship.
Develop and implement a comprehensive Secure Software Development Lifecycle (SSDLC) framework.
Oversee the integration of security practices into all phases of the software development lifecycle, including CI/CD guardrails.
Conduct risk assessments and threat modeling to identify and mitigate potential security vulnerabilities.
Collaborate with development teams to ensure secure coding practices and adherence to security standards, while maintaining developer productivity.
Implement and manage security automation tools and processes to enhance the efficiency of security operations.
Stay up-to-date on the latest security trends, vulnerabilities, and technologies to continuously improve our security posture.
Provide expert guidance on security architecture and design for new and existing applications.
Lead incident response efforts related to application security breaches and vulnerabilities.
Foster a culture of security awareness and continuous improvement within the organization.

We are looking for an AI AppSec Engineer to join our team and make a real impact on our Secure Software Development Lifecycle! As an AI AppSec Engineer your mission will be to be the driving force behind our secure development lifecycle. You wont just find bugs; you will help build the systems that prevent them. You will have the opportunity to help navigate the "Agentic Era" by building autonomous security guardrails, securing LLM-based workflows, and empowering developers to move fast without breaking security. You will also be responsible for working closely under the AppSec Architect.
This role is based out of our Tel-Aviv site and will report to the AppSec Architect
What you will be responsible for:
Build & automate: Develop and maintain internal security tooling, automated workflows, and AI security agents.
Code integrity: Execute secure code reviews and provide actionable remediation guidance to engineering teams.
Vulnerability management: Lead the tracking, triaging, and reporting of security flaws across all product lines.
Best practice advocacy: Drive the adoption of secure coding standards, partnering with R&D and DevOps teams to embed security early and often.
Extend our D&R capabilities: Build scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
Document: Draft requirement documents for security products and innovative technologies.

We seek a dedicated and proactive Senior SecOps Engineer to join our InfoSec team and take ownership of all security-related tasks across the organization. In this role, you will be key in aligning security goals with infrastructure, R&D and IT requirements. You will be responsible for integrating security into our CI/CD pipelines, managing cloud infrastructure security, ensuring compliance with security standards, and protecting our infrastructure from vulnerabilities.
A day in the life and how youll make an impact:
Implement and manage security tools such as static code analysis, cloud posture monitoring, and penetration testing tools.
Embed security into the DevOps lifecycle, including CI/CD pipelines, IaC (Infrastructure as Code), and software development workflows.
Design and enforce security policies for cloud architecture, ensuring secure configurations and monitoring.
Lead incident response activities, vulnerability management, and forensic investigations to mitigate threats.
Drive compliance efforts (ISO 27001, SOC 2, GDPR, etc.) and audit readiness for the organization.
Work closely with stakeholders (CISO, COO, System Architects, DevOps, IT, Finance, HR, etc) to identify requirements and prioritize security needs.
Continuously monitor systems and infrastructure for vulnerabilities, intrusions, and misconfiguration.
Perform or manage penetration testing initiatives to identify security weaknesses.

We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows.

You will work directly with engineering teams across the US and EMEA.

What you will do
Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms.

Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.

Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.

Secure AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.

Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.

Investigate and respond to application security incidents, including root cause analysis and durable corrective action.

Contribute to secure development lifecycle and to compliance work.

Shape the Future of AI Infrastructure with our company
This is a rare opportunity to join one of the fastest-growing infrastructure companies in tech history, right at the epicenter of the AI revolution.
Recognized by Forbes as "the future of the market," our company is building the foundational enterprise software powering the AI era. We engineer platforms that capture, catalog, refine, and protect massive datasets across data centers, edge, and cloud, making real-time analytics, AI training, and inference simpler and faster than ever before.
Our explosive growth is fueled by relentless engineering innovation, a customer-first mindset, and a team of fearless company ronauts who thrive on solving computing's hardest problems. Join us at this pivotal moment in technology history and make a lasting impact on how the world processes data.
We are looking for a hands-on, forward-thinking Security Engineer to join our growing security team. In this role, you will lead offensive security initiatives, build internal automation using modern workflows and AI agents, and manage cloud and infrastructure risks. You will conduct penetration tests across our architecture, analyze deep protocol flaws, write custom tooling, and take security findings from discovery all the way to resolution.
Core Responsibilities:
Penetration Testing & AI Automation: Conduct comprehensive penetration tests across all components of our architecture-ranging from Web APIs down to S3 protocols-and design systems to automate routine pentesting using AI tools.
Protocol & Flaw Analysis: Leverage a deep understanding of network and application protocols to identify architectural and implementation flaws, using AI prompts and modern tooling to uncover edge-case security risks.
Tooling & Process Automation: Write custom internal security tools and leverage AI agents to automate repetitive tasks, incident responses, and continuous security workflows.
Secondary Responsibilities:
Cloud Security Monitoring: Monitor and manage cloud security posture using CNAPP (Cloud-Native Application Protection Platform) tools, maintaining oversight of our cloud infrastructure and containerized environments.
Vulnerability Management & Remediation: Run and maintain regular SAST and DAST scans across operating systems, Docker containers, and source code. Own security findings from discovery through code remediation and validation.
Jira & Delivery Tracking: Manage, prioritize, and promote security Jira tickets through the full lifecycle-from initial triage and assignment through to final delivery and verification.

Required Senior Security Engineer
As a Senior Enterprise Security Engineer, you will be a foundational architect of our security posture, directly safeguarding our corporate infrastructure, sensitive financial data, and global user base. This is a highly hands-on, configuration-driven role that requires working directly with systems that power our security program in a modern, cloud-native environment.
Your work will be critical in ensuring we become globally recognized for secure, unparalleled corporate travel and expense management.
What Youll Do:
Vulnerability Management & Exposure Reduction: Architect, manage, and scale the end-to-end vulnerability management program. Oversee continuous asset discovery, vulnerability scanning, threat exposure assessment, and risk-based prioritization (CVSS, EPSS, threat intelligence). Partner closely with infrastructure, engineering, and IT teams to establish SLAs, streamline patch management workflows, and validate effective remediation.
Security Incident Response & On-Call Rotation: Participate in the security engineering on-call rotation. Serve as a responder responsible for identifying, scoping, triaging, managing, and mitigating security incidents, followed by leading thorough post-incident reviews and root-cause analyses.
Detection & Automation Optimization: Help improve and maintain our existing detection pipeline by providing feedback on alert quality, reviewing current monitoring coverage, and performing direct tuning in SIEM platforms to reduce noise and increase signal fidelity. Evaluate existing SOAR playbooks and workflows, offering recommendations and performing targeted updates to streamline response processes.
Identity Governance & Access Control: Define and enforce strong IAM principles (e.g., Least Privilege, Zero Trust) and contribute to identity governance platforms to ensure secure authentication, authorization, and access across the enterprise.
Email Security: Strengthen email security by managing alerts and workflows in platforms like Material Security, reviewing post-delivery threats, and improving automated response to suspicious messages and mailbox activity.

Were growing and looking to hire a Senior Security Operations Engineer who embodies our core values: People First, Customer Obsession, Strive for Excellence, and Integrity.
About the Company:
A global leader in cyber-physical systems (CPS) protection, dedicated to securing the critical infrastructure that keeps the world running. Were a fast-growing, award-winning team where innovation meets purpose-and we want you to help us define the future of cybersecurity.
About the Role:
In this role, you will be a key architect and operator of our modern security posture, focusing heavily on Cloud Access Security Broker (CASB/SSE) architecture, next-generation Endpoint Detection & Response (EDR), and securing the deployment and usage of Artificial Intelligence (AI) and Large Language Models (LLMs) across the enterprise.
As threats evolve, we are proactively embedding AI-driven defense mechanisms while managing the unique threat vectors introduced by enterprise AI adoption. If you thrive at the intersection of data protection, cloud edge security, and cutting-edge automation, this position offers an exceptional opportunity to impact our global defense strategy.
Responsibilities
As a Senior Security Operations Engineer, your responsibilities will include:
Engineering level oversight and support of the operational security environment including endpoint security, cloud/SaaS security, email security, AI security, and network security.
Design, implement, and maintain security solutions for on-premises and cloud environments (e.g., AWS, Azure, GCP).
Architect, configure, and maintain Security Service Edge (SSE), including CASB, Next-Gen SWG, and ZTNA. Establish data loss prevention (DLP) profiles, threat protection policies, and granular access controls across multi-cloud and SaaS environments.
Assist in responses to internal and external compliance audits, penetration tests and vulnerability assessments.
Provide recommendations regarding direction of systems and applications to help secure access, data and assets.
Research and analyze Security Operations Center (SOC) related cyber threats , alerts, and vulnerabilities and ensure our systems are properly protected.
Conduct research on emerging products, services, protocols, and standards relative to the information security arena.
Work with IT Security product vendors and service providers, to evaluate potential security offerings, including product evaluations, pilots and proof of concept installations
Ability to understand and troubleshoot cyber security issues, network configurations, system configurations and upgrades, user authentication, etc..
Ability to work well with other technology areas to deploy security technologies.
Customer service-oriented
Strong work ethic and sense of urgency
Develop and maintain security architecture diagrams, documentation, and standards.

Required Senior Application Security Engineer
As a Senior Application Security Engineer, youll plan, build, and support efforts to strengthen security across the organization. As part of our Security & Platform organization, youll work across the software development lifecycle and the underlying cloud and platform environment.
Youll own application security throughout the SDLC, including security requirements, threat modeling, secure design reviews, code reviews, application and API security testing, and production hardening. The role combines application security, cloud and platform security, and security automation. Youll partner closely with Security, Engineering, Platform, DevOps, and IT teams to build secure-by-default systems and reduce risk at scale.
Youll also define and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance. This is a hands-on engineering role for someone who can move comfortably between architecture and threat modeling, code and API reviews, cloud and identity guardrails, CI/CD security controls, vulnerability remediation, and automation.
Responsibilities
Define, track, and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance.
Own application security across the SDLC, from security requirements and threat modeling through secure design, code reviews, testing, and production hardening.
Strengthen cloud and platform security by implementing scalable security controls, identity guardrails, and secure-by-default practices.
Partner closely with Security, Engineering, Platform, DevOps, and IT teams to reduce security risk and improve security practices across the organization.
Designing controls for multi-account or multi-cloud environments using Terraform, policy-as-code technologies such as OPA or Sentinel, or automated remediation workflows.
Experience running a Security Champions, bug bounty or responsible disclosure program, or delivering hands-on secure engineering training.
You'll translate technical risk into clear remediation guidance and influence engineering and leadership stakeholders through strong written and verbal communication.