כניסההרשמה
חזרה

Senior Application Security Engineer

Via Transportation
שכר לא צויןTel Aviv, היברידיסניורמשרה מלאה
משרה חיצונית, ההגשה באתר החברהאושר שהמשרה פתוחה לפני 11 שעות

You will help secure Via’s applications throughout the software development lifecycle, working with development, operations, and product teams to identify and address vulnerabilities. You will also build application security tools and practices, including using AI safely to support security work.

מה תעשו

  • Perform penetration tests, vulnerability scans, and code reviews.
  • Work with development teams to remediate vulnerabilities and apply secure coding practices.
  • Define application security testing strategies for static analysis, dynamic analysis, and software composition analysis.
  • Build security tooling and automation, including CI/CD integrations and AI-assisted workflows.
  • Maintain application security policies, standards, and procedures.
  • Monitor application security metrics and participate in application security incident response.

דרישות

  • At least 4 years of experience as an Application Security Engineer or in a similar role.
  • Strong understanding of OWASP Top 10, CWE Top 25, and SANS Critical Security Controls.
  • Experience with application security testing tools and techniques, including SAST, DAST, or SCA.
  • Proficiency in at least one scripting language, such as Python, JavaScript, or Ruby.
  • Experience with secure coding practices and vulnerability remediation.

יתרון

  • Bachelor’s degree in Computer Science or a related field.
  • Experience with cloud platforms; AWS is an advantage.
  • Familiarity with CI/CD pipelines and DevOps practices.

תנאי סף

  • At least 4 years of experience as an Application Security Engineer or in a similar role

הטבות

  • Competitive compensation package including base salary and equity
  • Health insurance with a discount for family members
  • Hybrid work
  • Career development and growth opportunities
  • Freefit and sports lessons
  • 10bis/Cibus
  • Happy hours, team events, and communities
Application SecurityPenetration TestingSASTDASTSCAPythonCI/CDSecure Coding