Application Security / Product Security Engineer

About the role

UpSecurity is seeking a hands‑on Application Security / Product Security Engineer to strengthen product security in an R&D environment while building Application Security capabilities for a large enterprise. You will own the full lifecycle of security initiatives, from identifying gaps to implementing controls and working directly with development and DevOps teams.

Key responsibilities

• Build and improve Secure SDLC and Application Security processes, including threat modeling and security design reviews.
• Implement and enhance SAST, SCA, DAST, secrets scanning and IaC security controls within CI/CD pipelines.
• Work directly with developers and DevOps engineers to remediate vulnerabilities and validate findings.
• Support security for web applications, APIs, cloud‑native services and modern development environments.
• Assess customers’ AppSec maturity, identify gaps and drive practical security improvements.

Required profile

• 3+ years of hands‑on experience in Application Security, Product Security or DevSecOps.
• Proven ability to integrate security tools and practices into SDLC and CI/CD workflows.
• Strong communication skills in both Hebrew and English, with the capacity to work independently and own projects end‑to‑end.

Required skills

• Secure SDLC implementation
• Threat modeling and security design reviews
• SAST, SCA, DAST, secrets scanning tools
• Infrastructure‑as‑code (IaC) security
• CI/CD pipeline security integration
• Web and API security (OWASP knowledge)
• Cloud platforms: AWS, Azure, GCP
• Containers and Kubernetes
• Scripting and security automation