Application Security Engineer

The role

This Senior Application Security Engineer will shape and own the Secure Software Development Lifecycle. You will manage security tooling and lead assessments of application and API security across products and services.

What you will do

• Collaborate with engineering teams to define remediation strategies and orchestrate agentic workflows.
• Design, implement, and drive SSDLC guardrails including security design reviews and threat modeling.
• Orchestrate agentic threat modeling, architecture reviews, and security assessments of cloud-based applications.
• Manage the bug bounty program by validating reports and coordinating response.
• Own and operate AppSec tools including SAST, ASPM, and other security scanners.
• Act as the point of contact for findings from penetration tests, automated scanners, and external assessments.
• Research application security trends, frameworks, vulnerabilities, and best practices.
• Promote security culture by educating engineers, architects, and DevOps teams.

Required qualifications

• 3+ years of experience in Application Security, Product Security, or Secure Software Development.
• Experience working with modern web application stacks, cloud-native architectures, APIs, and CI/CD pipelines.
• Strong understanding of application security principles, common vulnerabilities (OWASP Top 10), and secure coding best practices.
• Experience with SAST/DAST/IAST tools.
• Experience managing bug bounty programs and third-party testing engagements.
• Excellent communication skills.
• Ability to balance pragmatic risk mitigation with product velocity, business needs, and user experience.
• A growth mindset and a desire to mentor others.

Nice to have

• OSCP
• GWAPT
• CISSP
• CSSLP

Benefits

• Competitive salary
• Meaningful equity grants
• Wellness programs
• Exceptional family leave policies

Before you apply

• We may also conduct background checks

About the company

HoneyBook is an AI-powered business management platform for service-based business owners. Founded in 2013, it is based in San Francisco and Tel Aviv.