16 days ago
Herẕliyya, IsraelMid Level
Responsibilities
- Review and approve secure architecture designs for customer, partner, integrator, and internal solutions, including AI initiatives.
- Define application security standards, guidelines, requirements, and robust security controls for on-premises and cloud systems.
- Collaborate with R&D, DevOps, and DevSecOps teams on application security initiatives.
- Define CI/CD and runtime security gates for SAST, SCA, secret scanning, and image/container scanning.
- Provide technical guidance on selecting and integrating internal and third-party security solutions.
- Serve as an application security subject matter expert and mentor internal teams.
- Optimize AppSec processes and workflows through AI-powered tooling and automation.
- Research and help create security solutions for on-premises, cloud, and AI security challenges.
Requirements
- At least 4 years of cybersecurity experience, including at least 2 years in Application Security or Product Security.
- In-depth understanding of CI/CD workflows and methodology; Azure DevOps and GitHub experience is advantageous.
- Familiarity with AI and agentic architectures and the MCP, including hands-on experience building custom security skills and agents.
- Strong communication, collaboration, and ability to explain complex security concepts to technical and non-technical stakeholders.
- Ability to support multiple projects and application security initiatives in parallel.
- Bachelor’s degree in Computer Science, Information Security, or a related field is advantageous.
- Hands-on familiarity with SonarQube, Snyk, Wiz, and other security tools used in CI/CD and production environments is advantageous.
- Strong knowledge of AWS, Azure, GCP, Kubernetes, and associated security services and features is advantageous.
- Knowledge of Active Directory, Azure Entra ID, Office 365 APIs, and Azure cloud services is advantageous.
- Familiarity with GitHub, GitHub Actions, CI/CD pipelines, and source code management workflows is advantageous.
- Ability to read and review .NET, Node.js, and Python code.
- Knowledge of SSDLC and AppSec practices such as risk assessments, threat modeling, vulnerability assessments, or penetration testing is advantageous.
- Fintech or financial services experience and familiarity with PCI DSS, PSD2, and GDPR are advantageous.
Benefits
- Hybrid, full-time role based in Glilot.
- Payoneer offers a diverse and inclusive workplace with reasonable accommodation available during the hiring process.
Tech Stack
Categories
About Payoneer
Payoneer builds a global B2B payments platform for SMBs, marketplaces, and freelancers to send, receive, and manage cross-border funds. Products include multi-currency accounts, mass payouts, and global bank transfers, monetized via transaction and FX fees. Founded in 2005 and headquartered in New York, it operates in 190+ countries and is a public company listed on NASDAQ.