3 hours ago
Tel Aviv-Yafo, IsraelSenior
Responsibilities
- Partner with development and product teams on application and product security throughout the software development lifecycle.
- Perform hands-on security reviews of applications, APIs, services, and code.
- Identify, investigate, validate, and assess product security vulnerabilities and security findings.
- Provide remediation guidance and work with development teams through resolution.
- Perform threat modeling and security analysis for new and existing product capabilities.
- Use and improve application security controls and technologies including SAST, SCA, DAST, API Security, and WAF.
- Assess security across web applications, APIs, microservices, containers, Kubernetes, and cloud-native services.
- Improve and automate Product Security processes, tooling, and security checks.
- Support secure coding practices, vulnerability disclosure, and Bug Bounty activities.
- Contribute to Product Security practices and capabilities across the engineering organization.
Requirements
- At least 5 years of hands-on experience in Application Security, Product Security, or a closely related software security role.
- Ability to read, understand, and review application code using .NET, JavaScript/TypeScript, or comparable modern technologies.
- Hands-on experience identifying and analyzing application and API security vulnerabilities.
- Experience with threat modeling and application security reviews.
- Strong understanding of authentication, authorization, session management, web security, API security, and mobile security.
- Strong knowledge of OWASP Top 10s and practical remediation.
- Hands-on experience with SAST, SCA, DAST, API Security, and WAF.
- Experience with microservices, APIs, containers, Kubernetes, and cloud-native environments.
- Knowledge of AWS security and/or Azure security.
- Understanding of CI/CD and software development environments.
- Strong analytical, problem-solving, communication, and collaboration skills.
- Preferred experience developing security tooling or automation, software supply chain security, fintech or payments, vulnerability research, Bug Bounty or vulnerability disclosure programs, AI/LLM application security, AI coding tools, MCP, agentic systems, security research, or open-source contributions.
Benefits
- Flexible hybrid workplace with two days per week working from home and three days per week in the North Tel Aviv office.
- Competitive benefits, career coaching, and an inclusive collaborative work environment.
- Shuttle services from the nearest train station and across Tel Aviv.
- Employee parking, snacks, and treats available at the office.
Tech Stack
Categories
About Tipalti
Tipalti builds a cloud platform for finance automation, used by mid-market companies to manage accounts payable, global payouts, procurement, expenses, supplier onboarding, tax compliance, and treasury. It sells its software as a SaaS subscription and partners with Citi, Wells Fargo, J.P. Morgan, and Visa for payments and card capabilities. Founded in 2010, the privately held company is headquartered in Foster City, California, and supports supplier payments across 200+ countries and multiple currencies.