Application Security Engineer at Payoneer

The role

Payoneer, the global financial platform for cross-border business, is hiring an Application Security Engineer for its Cyber team. The job is full-time and hybrid at Glilot, with the listing's location given as Herzliya. You would be responsible for application security standards, guidelines and requirements across different groups in the company, using your knowledge of secure architecture, design and the secure development lifecycle (SSDLC) to protect its products and sensitive financial data.

What you will do

• Review and sign off architecture designs for security on new features and use cases, whether for customers, partners and integrators or for in-house solutions, including many AI projects, with regard to good practice, regulation and business goals.
• Work with R&D and DevOps or DevSecOps teams to define security requirements and design strong controls, in the cloud and on-prem.
• Set the gates and processes in CI/CD, including SAST, SCA, secret scanning and image and container scanning, in CI and at runtime.
• Give technical guidance to teams choosing and integrating in-house solutions or outside vendors.
• Follow new security technologies, threats and trends, and recommend improvements.
• Act as the company's application security expert, guiding and mentoring other teams.
• Improve AppSec processes with AI-powered tools and automation.
• Help create or research solutions to security problems in AI, in the cloud and on-prem.

What you need

• 4 or more years in cybersecurity, with at least 2 in application or product security.
• A thorough understanding of CI/CD workflows and methods. Azure DevOps and GitHub are a plus.
• Familiarity with AI and agentic architectures and MCP, and hands-on experience of creating your own skills and agents for security work.
• Excellent communication, including explaining security ideas to technical and non-technical people.
• The ability to run several projects at once and support different teams.

Nice to have

• A bachelor's degree in Information Security, Computer Science or a related subject.
• Hands-on use of security tools in CI/CD and production, such as SonarQube, Snyk and Wiz.
• Strong knowledge of AWS, Azure and GCP and their security services.
• Strong knowledge of Kubernetes.
• The Microsoft enterprise ecosystem: Active Directory or Azure Entra ID, Office 365 APIs and Azure Cloud services.
• GitHub and GitHub Actions, including CI/CD pipelines and source control workflows.
• Reading and reviewing code, especially .NET, Node.js and Python.
• Threat modeling, penetration testing, risk assessments or vulnerability assessments.
• Fintech or financial services experience.
• Financial regulation and standards such as GDPR, PSD2 and PCI DSS.