Application Security Engineer

About Payoneer
Founded in 2005, Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world's underserved businesses to a rising global economy. We're a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories.

By taking the complexity out of the financial workflows–including everything from global payments and compliance to multi-currency and workforce management, to providing working capital and business intelligence–we give businesses the tools they need to work efficiently worldwide and grow with confidence.

Application Security Engineer
Israel

Hybrid

Full-time

We are seeking an
Application Security Engineer
to join our Cyber Team in Payoneer. As an Application Security Engineer, you will be responsible for overall Application Security standards, guidelines, and requirements for different groups in Payoneer. Your expertise in secure architecture, design, and SSDLC will play a crucial role in ensuring the security of our products and the protection of our sensitive financial data. This is a strategic position that offers an opportunity to shape and drive the security initiatives of our cutting-edge fintech solutions.

What You'll Do

• Review and approve secure architecture designs for new features and use-cases for Payoneer customers, partners, integrators or in-house solutions, considering best practices, regulatory requirements and business objectives.
• Collaborate with cross-functional teams (mainly R&D and DevOps/DevSecOps) to define security requirements and design robust security controls for systems, both on-prem and in the cloud.
• Define CI/CD processes and gates, such as SAST, SCA, Secret scanning and image/containers scanning during CI and Runtime.
• Provide technical guidance and expertise to internal teams in selecting and integrating in-house solutions or third-party vendors.
• Stay up-to-date with the latest security technologies, threats, and trends, and provide recommendations for continuous improvement.
• Serve as a subject matter expert on application security, providing guidance and mentorship to other teams in the company.
• Assist in creating or researching for security solutions – solving security challenges, both on-prem and in the cloud.

Who You Are

• 2+ years' experience working as an Application Security Expert/Engineer/Architect or in a similar role.
• Experience and in-depth understanding of CI/CD workflows and methodology (Azure DevOps is an advantage)
• Deep understanding of cloud security principles and industry best practices.
• Multi-task skills: ability to work on multiple projects in parallel, providing application security support for different teams and initiatives in the company.
• Excellent communication and collaboration skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders.

Advantage

• Knowledge with AWS, Azure and GCP & their associated security services and features, as well as hands-on experience with cloud security products such as Wiz, Aqua, etc.
• Experience/familiarity (hands-on) with security tools integrated into our CI/CD and production environments such as SonarQube, Snyk, Aqua, Apiiro and others.
• Strong knowledge and experience with Kubernetes platform and services.
• Code review skills, mainly DotNet & Python.
• Additional skills related to Secure Software Development Lifecycle (SSDLC) and Application Security (AppSec) further enhance the candidate's value. These skills may include risk assessments, threat modeling, vulnerability assessments or penetration testing.
• Experience in fintech or financial services industry and familiarity with regulatory requirements and compliance standards in the financial industry, such as PCI DSS, PSD2 and GDPR.

The Payoneer Ways of Working
Act as our customer's partner on the inside
Learning what they need and creating what will help them go further.
Do it. Own it.
Being fearlessly accountable in everything we do.
Continuously improve
Always striving for a higher standard than our last.
Build Each Other Up
Helping each other grow, as professionals and people.
If this sounds like a business, a community, and a mission you want to be part of, apply today.

We are committed to providing a diverse and inclusive workplace. Payoneer is an equal opportunity employer, and all qualified applicants will receive consideration for employment no matter your race, color, ancestry, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law. If you require reasonable accommodation at any stage of the hiring process, please speak to the recruiter managing the role for any adjustments. Decisions about requests for reasonable accommodation are made on a case-by-case basis.