דרושים » אבטחת מידע וסייבר » Application Security Engineer

As a Senior Product Security Engineer, you will help ensure that security is built into the products, platforms, AI systems, and clinical workflows that support healthcare providers and patients at scale. This is a hands-on technical role focused on securing real systems in production, influencing architecture, and partnering closely with engineering, AI, DevOps, product, quality and regulatory.
You will work across cloud-native services, medical imaging workflows, healthcare integrations, AI/ML pipelines, APIs, data flows, and regulated product development processes. Your work will directly support our company's ability to deliver secure, reliable, and trusted clinical AI solutions to healthcare organizations worldwide.
What Makes This Role Unique at our company
Clinical AI with real-world patient impact - our company operates in an environment where security is not only about protecting systems and data. Security decisions can affect clinical workflows, care-team coordination, customer trust, and patient safety.
Highly sensitive healthcare data - You will help protect medical imaging data, clinical metadata, PHI/PII, customer environments, and AI-driven workflows that require strong privacy, access control, data protection, and auditability.
Security for AI/ML and medical imaging systems - The role extends beyond traditional AppSec into AI/ML security, data pipeline protection, inference integrity, model-related risks, and misuse scenarios in clinical workflows.
Complex healthcare integrations - our company integrates with hospital systems and healthcare workflows that may include PACS, EHR, VNA, RIS/worklists, scheduling systems, and communication platforms. You will help secure the data flows, authentication models, APIs, and deployment patterns behind these integrations.
Engineering-driven security in a regulated environment - This is not a checkbox compliance role. However, because our company operates in healthcare and clinical AI, security must be practical, evidence-based, and aligned with regulatory, customer, and quality expectations.
Cloud-native scale and production ownership - You will work with modern cloud infrastructure, Kubernetes, containers, CI/CD pipelines, identity and access management, observability, vulnerability management, and software supply-chain controls.
Responsibilities
Secure product and clinical workflows end-to-end - Work directly with engineering and product teams to identify, prioritize, and remediate security risks across services, APIs, medical imaging workflows, AI outputs, data flows, and customer-facing product features.
Drive secure-by-design architecture - Provide practical security guidance on authentication, authorization, tenant/customer isolation, encryption, secrets management, service-to-service communication, audit logging, and secure data handling.
Strengthen cloud-native security - Improve security across cloud environments, Kubernetes, containers, IAM, network segmentation, workload identity, infrastructure-as-code, logging, monitoring, and cloud security posture management.
Embed security into the development lifecycle - Integrate, tune, and operationalize security tooling across CI/CD pipelines, including SAST, SCA, IaC scanning, container scanning, secrets detection and build/release integrity controls.

Required Senior Application Security Engineer
As a Senior Application Security Engineer, youll plan, build, and support efforts to strengthen security across the organization. As part of our Security & Platform organization, youll work across the software development lifecycle and the underlying cloud and platform environment.
Youll own application security throughout the SDLC, including security requirements, threat modeling, secure design reviews, code reviews, application and API security testing, and production hardening. The role combines application security, cloud and platform security, and security automation. Youll partner closely with Security, Engineering, Platform, DevOps, and IT teams to build secure-by-default systems and reduce risk at scale.
Youll also define and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance. This is a hands-on engineering role for someone who can move comfortably between architecture and threat modeling, code and API reviews, cloud and identity guardrails, CI/CD security controls, vulnerability remediation, and automation.
Responsibilities
Define, track, and report meaningful security metrics, including control coverage, vulnerability trends, remediation timelines, security exceptions, and baseline compliance.
Own application security across the SDLC, from security requirements and threat modeling through secure design, code reviews, testing, and production hardening.
Strengthen cloud and platform security by implementing scalable security controls, identity guardrails, and secure-by-default practices.
Partner closely with Security, Engineering, Platform, DevOps, and IT teams to reduce security risk and improve security practices across the organization.
Designing controls for multi-account or multi-cloud environments using Terraform, policy-as-code technologies such as OPA or Sentinel, or automated remediation workflows.
Experience running a Security Champions, bug bounty or responsible disclosure program, or delivering hands-on secure engineering training.
You'll translate technical risk into clear remediation guidance and influence engineering and leadership stakeholders through strong written and verbal communication.

Were looking for a DevSecOps Manager to lead our Israel-based DevSecOps team and own the security posture of our cloud infrastructure. Youll inherit a strong, established team of DevOps and DevSecOps engineers with meaningful ownership and a mature security program.
This is a hands-on leadership role that combines people management, technical depth, and architectural influence. Youll define the cloud security roadmap, remain close to the code and systems, and partner with Product Security, R&D, and Cloud Engineering to make security part of the platform by default.
Youll own:
The security posture of our multi-cloud infrastructure across AWS, Azure, and GCP.
Identity governance, least-privilege access, credential lifecycle management, and cloud vulnerability management.
Security controls embedded directly into the cloud platform, enabling R&D teams to build and operate securely by default.
Developer toolchain security, including CI/CD pipelines, software supply chain risks, and developer-facing guardrails.
The implementation of security as code, replacing manual processes and ticket-based controls with scalable automation.
The leadership, development, and technical growth of a team of DevOps and DevSecOps engineers.
Teams roadmap, priorities, and quarterly planning in alignment with Cloud Engineering and the broader Security organization.
The teams role as the primary cloud security partner for Product Security, R&D, and Cloud Engineering.
Clear security standards, ownership boundaries, and operating practices across the cloud platform.
Youll solve:
Security challenges across a large, evolving environment with multiple production cells, several cloud providers, and more than 500 engineers.
Gaps in cloud identity, permissions, credentials, workload protection, and vulnerability management.
Security risks within Kubernetes, including RBAC, pod security, network policies, and runtime protection.
Risks across GitHub, CI/CD pipelines, third-party dependencies, and the software supply chain.
Friction between strong security controls and the speed, usability, and autonomy R&D teams need.
Repetitive security work by turning manual controls into automated, reusable platform capabilities.
Cross-functional challenges that require alignment between Cloud Engineering, Product Security, R&D, and compliance stakeholders.
Emerging cloud security gaps by proactively identifying them, proposing practical solutions, and driving remediation through completion.

We are looking for an AI AppSec Engineer to join our team and make a real impact on our Secure Software Development Lifecycle! As an AI AppSec Engineer your mission will be to be the driving force behind our secure development lifecycle. You wont just find bugs; you will help build the systems that prevent them. You will have the opportunity to help navigate the "Agentic Era" by building autonomous security guardrails, securing LLM-based workflows, and empowering developers to move fast without breaking security. You will also be responsible for working closely under the AppSec Architect.
This role is based out of our Tel-Aviv site and will report to the AppSec Architect
What you will be responsible for:
Build & automate: Develop and maintain internal security tooling, automated workflows, and AI security agents.
Code integrity: Execute secure code reviews and provide actionable remediation guidance to engineering teams.
Vulnerability management: Lead the tracking, triaging, and reporting of security flaws across all product lines.
Best practice advocacy: Drive the adoption of secure coding standards, partnering with R&D and DevOps teams to embed security early and often.
Extend our D&R capabilities: Build scalable solutions to identify malicious activity, triage alerts, and investigate and remediate incidents.
Document: Draft requirement documents for security products and innovative technologies.

Were looking for an experienced, multidisciplinary Security Engineer with a strong technical foundation and the ability to learn and own new technologies and domains from the ground up.Youll join Corporate Security Engineering within our Cyber Defense organization, Youll design, implement, and mature the security controls that protect our business applications, workforce, and corporate environment.
Youll work closely with Cyber Defense, IT, DRE, R&D, People, Legal, and GRC to embed security controls at scale. Our strategy is AI-first and built on identity-centric controls, Zero Trust principles, and scalable automation.
Youll Own
The security posture of our corporate technology stack, including AI security, identity, DLP and insider risk, EDR, MDM, browser security, SSPM/CASB, network security, and email and collaboration security.
Zero Trust access policies for workforce and external users, along with hardening for macOS, Windows, and Linux endpoints, browsers, SaaS applications, and corporate networks.
Identity and access capabilities, including SSO, phishing-resistant MFA, passwordless authentication, conditional access, device trust, PAM, joiner-mover-leaver controls, and service-account hygiene.
The evaluation and rollout of new security technologies, taking solutions from proof of concept through production.
Automated workflows and API integrations that scale security controls without adding operational overhead or headcount.
SaaS, third-party, and AI governance, including SaaS configuration reviews, vendor security assessments, access reviews, OAuth governance, posture remediation, and enablement-first guardrails for employee AI tools.
Domain expertise for SecOps incident response and partnership with IT and R&D to embed security standards and operating procedures into day-to-day processes.
Youll Solve
How to protect a fast-growing SaaS companys corporate environment across a broad and evolving technology stack.
How to translate security risks into clear requirements, practical controls, and reliable production operations.
How to strengthen identity, endpoint, SaaS, network, email, and collaboration security through a unified Zero Trust approach.
How to automate security processes and integrate systems so controls remain effective as we scale.
How to enable employees to use SaaS and AI tools safely through thoughtful guardrails rather than blanket restrictions.
How to make security standards easy for partner teams to adopt by embedding them into operational workflows and SOPs.
Youll Impact
The security and resilience of our business applications, workforce, and corporate environment.
Our ability to scale securely through stronger identity-centric controls, Zero Trust access, endpoint hardening, and SaaS governance.

Artlist is a leading creative technology company on a mission to empower creators and brands to bring their vision to life with video. Offering cutting-edge AI tools and models for image, video, and voiceover creation, alongside high-quality creative assets and powerful editing tools, Artlist enables creators to stay on trend and achieve their creative goals. Trusted by over 30 million creators worldwide and top brands including Google, Amazon, Microsoft, and Versace, Artlist provides a seamless, subscription-based platform with a global license, giving creators everything they need to produce professional video content efficiently. For more information, visit artlist.io About the role We're looking for an Application Security Engineer to join Artlist's security team and work closely with Product and R&D on securing our applications, development processes, and AI-powered products. This is a hands-on engineering role for someone with a strong Application Security foundation who enjoys working directly with developers, building security automation, and helping teams design and ship secure products. You'll work across Application Security, cloud security, and AI-related security challenges, with significant ownership and the opportunity to shape how security is implemented across Artlist. What you'll do
* Partner with R&D and Product on threat modeling and secure design reviews.
* Embed security controls into the SDLC and CI/CD pipelines.
* Identify and remediate application and API security risks.
* Integrate and improve security tooling such as SAST, SCA, WAF and cloud security tools.
* Build security automation and internal tooling using Python, Bash or similar languages.
* Help secure cloud environments and production applications.
* Define practical security guardrails around authentication, authorization, data exposure, injection risks and rate limiting.
* Contribute to the security of AI-powered product features, including risks such as prompt injection, data leakage and model access.
* Support incident response and remediation when application or cloud security issues arise.

Shape the Future of AI Infrastructure with our company
This is a rare opportunity to join one of the fastest-growing infrastructure companies in tech history, right at the epicenter of the AI revolution.
Recognized by Forbes as "the future of the market," our company is building the foundational enterprise software powering the AI era. We engineer platforms that capture, catalog, refine, and protect massive datasets across data centers, edge, and cloud, making real-time analytics, AI training, and inference simpler and faster than ever before.
Our explosive growth is fueled by relentless engineering innovation, a customer-first mindset, and a team of fearless company ronauts who thrive on solving computing's hardest problems. Join us at this pivotal moment in technology history and make a lasting impact on how the world processes data.
We are looking for a hands-on, forward-thinking Security Engineer to join our growing security team. In this role, you will lead offensive security initiatives, build internal automation using modern workflows and AI agents, and manage cloud and infrastructure risks. You will conduct penetration tests across our architecture, analyze deep protocol flaws, write custom tooling, and take security findings from discovery all the way to resolution.
Core Responsibilities:
Penetration Testing & AI Automation: Conduct comprehensive penetration tests across all components of our architecture-ranging from Web APIs down to S3 protocols-and design systems to automate routine pentesting using AI tools.
Protocol & Flaw Analysis: Leverage a deep understanding of network and application protocols to identify architectural and implementation flaws, using AI prompts and modern tooling to uncover edge-case security risks.
Tooling & Process Automation: Write custom internal security tools and leverage AI agents to automate repetitive tasks, incident responses, and continuous security workflows.
Secondary Responsibilities:
Cloud Security Monitoring: Monitor and manage cloud security posture using CNAPP (Cloud-Native Application Protection Platform) tools, maintaining oversight of our cloud infrastructure and containerized environments.
Vulnerability Management & Remediation: Run and maintain regular SAST and DAST scans across operating systems, Docker containers, and source code. Own security findings from discovery through code remediation and validation.
Jira & Delivery Tracking: Manage, prioritize, and promote security Jira tickets through the full lifecycle-from initial triage and assignment through to final delivery and verification.

We are seeking a Senior Application Security Engineer with profound expertise in application security. In this role, you will execute fundamental AppSec tasks, including threat modeling, secure design reviews, code evaluation, and vulnerability management, leveraging both manual methods and advanced AI tooling. You will also help secure the AI systems Unity itself is building, including agentic tools and AI-assisted development workflows.

You will work directly with engineering teams across the US and EMEA.

What you will do
Lead threat modeling, secure design reviews, and penetration testing for Unity products and services, from the engine and editor to cloud services, APIs, and internal platforms.

Perform deep code review and manual testing on high-risk systems, using AI-assisted review processes and covering areas automated tooling cannot fully reach.

Build and operate security automation. Use and extend AI-assisted tooling for continuous code review, finding triage, and automated penetration testing, and step in where human judgment is required.

Secure AI and agentic systems. Assess AI-native products, LLM integrations, and agent workflows for the risks specific to them.

Partner with engineering teams to drive remediation, turning recurring findings into guardrails, secure defaults, and paved paths.

Investigate and respond to application security incidents, including root cause analysis and durable corrective action.

Contribute to secure development lifecycle and to compliance work.

We are looking for an experienced DevSecOps Engineer to join our DevOps core platform team and help strengthen the security of our cloud-native infrastructure and development pipelines.
You will work closely with our CISO, DevOps team, and developers to integrate security practices across the entire software development lifecycle (SDLC), helping ensure a secure, scalable, and resilient platform across cloud and on-prem environments.
Responsibilities
Integrate security practices into CI/CD pipelines and across the SDLC
Design and implement automated security solutions (vulnerability scanning, compliance checks, threat detection)
Build and maintain Infrastructure as Code (IaC) for secure, scalable cloud environments (Terraform, Ansible)
Automate security controls and operational processes across cloud and Kubernetes environments
Design, implement, and optimize CI/CD pipelines with a focus on security, reliability, and performance
Secure cloud and on-prem environments (IAM, network controls, encryption best practices)
Manage and harden Kubernetes workloads, including configuration, access control, and image security
Collaborate with DevOps, developers, and security teams to improve system reliability and overall security posture
Conduct security assessments, penetration testing, and compliance audits
Monitor threats, respond to incidents, and improve incident response processes
Promote DevSecOps culture by guiding teams on secure coding, infrastructure, and deployment practices
Enhance observability by integrating monitoring, logging, and SIEM solutions

We are growing and are looking for DevSecops to join our mission to increase access to life-saving treatments.

The Role:

Collaboration & Enablement

Act as a security advisor to development teams.

Collaborate cross-functionally to prioritize and address security topics.

Communicate risk, projects and mitigation strategies clearly and effectively.

Security in Dev & CI/CD

Design, implement, and maintain secure DevOps practices across the SDLC.

Integrate security tools (SAST, DAST, SCA, CSPM, etc.) into CI/CD pipelines.

Guide developers and DevOps teams on secure coding, vulnerability management, and remediation.

Review and harden CI/CD architecture (webhook signature verification, SSRF protection, replay attack mitigation) as pipelines evolve from static tokens to app-based auth models.

AI Security & Governance

Own security governance for AI coding/agent tools (Claude Code, Cursor, Codex, etc.)

least-privilege identities, admin console + MDM policy enforcement, agent access scoping.

Assess and monitor AI/LLM supply chain risk (model providers, orchestration frameworks/libraries, dependency compromise).

Partner with engineering on secure AI tool adoption and usage governance.

Automation & Monitoring

Develop and maintain automated security testing and vulnerability scanning processes to detect and remediate risks early in the development lifecycle.

Build and operate monitoring and alerting systems to ensure visibility.

Integrate and manage Viz SIEM platform (Coralogix), optimizing ingestion for signal-to-noise (e.g., cutting CI/CD and internal telemetry noise while preserving high-signal events).

Define alerting rules and dashboards to proactively identify suspicious activity.