3 months ago
Herẕliyya, IsraelMid Level
Responsibilities
- Partner with development and product teams to integrate security best practices throughout the SDLC.
- Lead threat modeling and architecture security reviews to identify and mitigate risks.
- Conduct code reviews, vulnerability scans, penetration testing, and secure product design reviews.
- Monitor emerging security threats, vulnerabilities, and industry trends.
- Support security incident response, root cause analysis, and post-incident improvements.
- Automate security processes and integrate security tools into CI/CD pipelines.
- Develop and deliver secure coding training for engineering teams.
- Own security initiatives and mentor developers on application security practices.
Requirements
- At least 3 years of experience in Application Security, Penetration Testing, or Product Security in a SaaS company.
- Deep understanding and hands-on experience with web application security, OWASP Top 10, authentication, encryption, and secure coding principles.
- Proficiency in scripting or programming languages such as Terraform, Python, JavaScript, or Go for security automation and infrastructure.
- Experience with cloud security best practices in AWS, GCP, or Azure.
- Strong communication skills for explaining security risks and recommendations to technical, non-technical, and executive stakeholders.
- Experience working with large-scale, complex R&D environments.
- Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience, is a bonus qualification.
- Hands-on DevSecOps experience and experience integrating security tools into CI/CD pipelines are bonus qualifications.
Benefits
- Career growth opportunities to deepen expertise in application security, DevSecOps, and cloud security.
- Global, diverse, and multicultural work environment across 25 offices in 19 countries.
- Employee-focused culture with tools and resources to support employees.
Categories
About AppsFlyer
AppsFlyer builds a marketing measurement and analytics platform for mobile-first brands and developers, spanning attribution, deep linking, privacy-centric data collaboration, and fraud protection. It sells enterprise SaaS and usage-based tools that help marketers connect spend to outcomes across mobile and connected experiences. Founded in 2011 and privately held, the company is headquartered in San Francisco and processes over 150 billion mobile app events daily for customers worldwide.