Application security engineer

We are looking for
An Application Security Engineer to join the AppSec team at our Rehovot/Haifa sites, within the Headquarters GO division. If you are passionate about application security, DevSecOps, and finding real vulnerabilities in complex environments - this is your opportunity to work hands-on with advanced technologies and make a real impact in a leading defense organization.
In this role you will
Implement and operate application security controls within CI/CD pipelines (SAST, SCA, DAST, secrets scanning)
Perform application security assessments, including code reviews and vulnerability analysis
Support and enforce secure SDLC (SSDLC) practices across development teams
Analyze and validate vulnerabilities, reducing false positives and prioritizing real risks
Work closely with developers to drive remediation and improve secure coding practices

דרישות:

Bachelor's degree in Computer Science, Information Security, or a related field
3-5 years of experience in Application Security, Cybersecurity, or DevSecOps
Strong understanding of OWASP Top 10, secure coding principles, CI/CD pipelines, and modern application architectures
Hands-on experience with SAST, DAST, or SCA tools and web application testing tools (e.g. Burp Suite)
Basic scripting skills ( Python / Bash)
Good communication skills in English

*Only relevant applications will be answered המשרה מיועדת לנשים ולגברים כאחד.