עדיין מחפשים עבודה במנועי חיפוש? הגיע הזמן להשתדרג!
במקום לחפש לבד בין מאות מודעות – תנו ל-Jobify לנתח את קורות החיים שלכם ולהציג לכם רק הזדמנויות שבאמת שוות את הזמן שלכם מתוך מאגר המשרות הגדול בישראל.
השימוש חינם, ללא עלות וללא הגבלה.
About Us
Legit Security is a cybersecurity company offering an enterprise ASPM platform that secures organizations' software supply chains across both on-premises and cloud environments. Our mission is to protect businesses from emerging threats targeting software development processes, ensuring secure software is built from the ground up.
What You’ll Do
- Lead or participate in deep research initiatives around SAST, SCA, secrets exposure, misconfigurations, AI security, and more
- Develop detection rules and security signatures for static code analysis engines
- Analyze code bases, pipelines, and development environments to map and model real-world attack vectors
- Investigate new vulnerabilities, CVEs, and package-related risks
- Collaborate with analysts and researchers to produce actionable security insights and detection logic
- Work closely with engineering teams to transform research into scalable security features
- Balance high-level threat modeling with hands-on technical deep-dives
What you’ll bring
- Proven experience in Application Security / Product Security / Security Research roles
- Strong coding skills – able to read and analyze code confidently (at least in one language such as Python, JavaScript, Go, etc.)
- Hands-on experience with AppSec tools such as SAST/SCA/Secrets Scanners (e.g., CodeQL, Semgrep, TruffleHog, GitGuardian, etc.)
- Deep understanding of common vulnerabilities, secure development practices, and real-world exploit scenarios
- Comfortable switching between technical implementation and broader threat understanding
- Bonus: Experience with bug bounty programs, vulnerability disclosures, or writing security content
- Bonus: Experience using or building AI/ML models in the context of cybersecurity
Why Join Us?
- Direct impact on a cutting-edge ASPM product used by security teams globally
- A research-driven culture that values depth, accuracy, and creativity
- Opportunities to work across the full spectrum of AppSec – from code to cloud to CI/CD
- A collaborative, highly technical environment with room for growth and innovation
במקום לחפש לבד בין מאות מודעות – תנו ל-Jobify לנתח את קורות החיים שלכם ולהציג לכם רק הזדמנויות שבאמת שוות את הזמן שלכם מתוך מאגר המשרות הגדול בישראל.
השימוש חינם, ללא עלות וללא הגבלה.