DevSecOps engineer

The role:

We are looking for a Senior Application Security Engineer to join Kaltura Cyber Security and take the lead in securing the company’s products and AI products.

The role will focus on driving SSDLC practices across all divisions while partnering with engineering and product teams to ensure security is embedded into every stage of development.

The day-to-day:

• Partner with product and engineering teams to embed a security-first mindset across the SDLC
• Perform design reviews, threat modeling, code reviews, and drive remediation of vulnerabilities
• Manage and optimize application security tools (SAST, SCA,IaC,…), including rule fine-tuning and developer support
• Lead and support penetration tests, security assessments, and hands-on testing of applications and services
• Mentor developers to raise security awareness and drive adoption of best practices
• Implement security automation frameworks and support development of product security features (authentication, cryptography, etc.)
• Respond to RFPs and customer questionnaires regarding application security

Ideally, we’re looking for:

• 3+ years of experience as an Application Security Engineer in cloud (preferably AWS) and SaaS environments
• Strong knowledge of attack vectors, vulnerabilities, and mitigations (OWASP, SANS)
• Experience integrating security into containerized development, CI/CD, and IaC (Terraform)
• Hands-on experience with application security testing tools and code reviews
• Programming background with one or more languages (Java, C#, .NET, PHP, Python, etc.)
• knowledge in AI models and AI security.

These would also be nice:

• Bachelor’s degree in Computer Science, Engineering, or related field
• Security certifications (GCIH, GWEB, CEH, OSCP, CISSP)
• Experience with cryptography, Docker/Kubernetes, and AWS security best practices

The perks:

1. Hybrid, flexible work environment
2. Extended private health (including mental) insurance
3. Personal and professional development programs
4. Occasional Cross company long weekends