Application Security / Product Security Engineer

UpSecurity is looking for a hands-on Application Security / Product Security Engineer to join our team and work across diverse, high-impact customer environments.

This role combines two exciting challenges: strengthening Product Security within a technology-driven R&D environment, while helping build and mature Application Security capabilities within a large enterprise organization.

You’ll have real ownership from identifying security gaps and defining the right approach to implementing security controls and working directly with R&D and DevOps teams.

What You'll Do?

• Build and improve Secure SDLC / Application Security processes.
• Perform Threat Modeling, Security Design and Architecture Reviews.
• Work directly with developers and DevOps teams on security issues and remediation.
• Implement and improve SAST, SCA, DAST, Secrets and IaC security controls within development and CI/CD processes.
• Analyze application vulnerabilities, validate findings and drive remediation through closure.
• Support security across Web, APIs, cloud-native applications and modern development environments.
• Help customers assess their current AppSec maturity, identify gaps and turn them into practical security improvements.
• Take ownership of security initiatives from planning through implementation.

What We're Looking for?

• 3+ years of hands-on experience in Application Security, Product Security or a closely related DevSecOps/Security Engineering role.
• Practical experience integrating security into SDLC and CI/CD.
• Experience with SAST/SCA/DAST/Secrets scanning or similar AppSec tooling.
• Experience with Threat Modeling and/or Security Design Reviews.
• Strong understanding of Web/API security, OWASP and application vulnerabilities.
• Ability to work directly with developers on technical remediation.
• Ability to read code and/or build scripts and security automation.
• Independent, hands-on mindset with the ability to own projects end-to-end.
• Strong communication skills in Hebrew and English.

Nice to Have

Experience with AWS/Azure/GCP, containers and Kubernetes, IaC security, Security Champions programs, penetration testing, AI/LLM security, or previous consulting experience.

Why This Role?

This isn’t a role where you’ll only review findings or operate existing security tools.

You’ll have the opportunity to build, implement and influence, working across different development environments, solving real security challenges and taking meaningful ownership of Application Security initiatives.