2 days ago
Tel Aviv-Yafo, IsraelSenior
Responsibilities
- Partner with development and product teams on application and product security throughout the software development lifecycle.
- Conduct hands-on security reviews of applications, APIs, services, and code.
- Identify, investigate, validate, and assess product security vulnerabilities and findings.
- Provide remediation guidance and support development teams through remediation.
- Perform threat modeling and security analysis for new and existing product capabilities.
- Use and improve application security controls and tooling, including SAST, SCA, DAST, API Security, and WAF.
- Assess security across web applications, APIs, microservices, containers, Kubernetes, and cloud-native services.
- Support secure coding practices and provide practical security guidance to engineering teams.
- Support vulnerability disclosure and Bug Bounty activities, including validation, risk assessment, and remediation follow-up.
- Automate Product Security processes, tooling, and security checks across the development lifecycle.
Requirements
- 5+ years of hands-on experience in Application Security, Product Security, or a closely related software security role.
- Ability to read, understand, and review application code using .NET, JavaScript/TypeScript, or comparable modern technologies.
- Hands-on experience identifying and analyzing application and API security vulnerabilities.
- Experience with threat modeling and application security reviews.
- Strong knowledge of authentication, authorization, session management, web security, API security, mobile security, and OWASP Top 10s.
- Hands-on experience with SAST, SCA, DAST, API Security, and WAF technologies.
- Experience with microservices, APIs, containers, Kubernetes, and cloud-native environments.
- Knowledge of AWS security and/or Azure security.
- Understanding of CI/CD and modern software development environments.
- Strong analytical, problem-solving, communication, and collaboration skills.
- Preferred experience includes security tooling or automation, software supply chain security, fintech or payments, vulnerability research, Bug Bounty or disclosure programs, AI/LLM application security, AI coding tools, MCP, agentic systems, security research, or open-source contributions.
Benefits
- Flexible hybrid work model in North Tel Aviv with two work-from-home days and three office days per week.
- Shuttle services are available from the nearest train station and across Tel Aviv.
- Parking is available for employees.
- Snacks and treats are provided on every floor.
- Tipalti offers competitive benefits, career coaching, and an inclusive workplace.
Tech Stack
Categories
About Tipalti
Tipalti builds a cloud platform for finance automation, used by mid-market companies to manage accounts payable, global payouts, procurement, expenses, supplier onboarding, tax compliance, and treasury. It sells its software as a SaaS subscription and partners with Citi, Wells Fargo, J.P. Morgan, and Visa for payments and card capabilities. Founded in 2010, the privately held company is headquartered in Foster City, California, and supports supplier payments across 200+ countries and multiple currencies.