AppSec Analyst

R&D
Israel
Full-time
Description

About Us

Legit Security is a cybersecurity company offering an enterprise ASPM platform that secures organizations' software supply chains across both on-premises and cloud environments. Our mission is to protect businesses from emerging threats targeting software development processes, ensuring secure software is built from the ground up

What You’ll Do

Lead or participate in deep research initiatives around SAST, SCA, secrets exposure, misconfigurations, AI security, and more
Develop detection rules and security signatures for static code analysis engines
Analyze code bases, pipelines, and development environments to map and model real-world attack vectors
Investigate new vulnerabilities, CVEs, and package-related risks
Collaborate with analysts and researchers to produce actionable security insights and detection logic
Work closely with engineering teams to transform research into scalable security features
Balance high-level threat modeling with hands-on technical deep-dives
Requirements

What you’ll bring

Proven experience in Application Security / Product Security / Security Research roles
Strong coding skills – able to read and analyze code confidently (at least in one language such as Python, JavaScript, Go, etc.)
Hands-on experience with AppSec tools such as SAST/SCA/Secrets Scanners (e.g., CodeQL, Semgrep, TruffleHog, GitGuardian, etc.)
Deep understanding of common vulnerabilities, secure development practices, and real-world exploit scenarios
Comfortable switching between technical implementation and broader threat understanding
Bonus: Experience with bug bounty programs, vulnerability disclosures, or writing security content
Bonus: Experience using or building AI/ML models in the context of cybersecurity

Why Join Us?

Direct impact on a cutting-edge ASPM product used by security teams globally
A research-driven culture that values depth, accuracy, and creativity
Opportunities to work across the full spectrum of AppSec – from code to cloud to CI/CD
A collaborative, highly technical environment with room for growth and innovation