{"id":3589777,"url":"https://alion.io/job/chamelio-senior-application-security-engineer","title":"Senior Application Security Engineer","company":{"id":1946173,"name":"Chamelio","domain":"chamelio.ai","url":"https://alion.io/company/chamelio","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":89000,"max_usd":205000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"Cursor","optional":false},{"name":"GCP","optional":false},{"name":"ISO 27001","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false},{"name":"Wiz","optional":false},{"name":"JavaScript","optional":true},{"name":"Kubernetes","optional":true},{"name":"LLM","optional":true},{"name":"Node JS","optional":true}],"status":"live","first_seen_at":"2026-11-01T15:21:17Z","employer_posted_date":"2026-11-01","last_verified_at":"2026-11-03T03:19:06Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"About Chamelio\nChamelio is revolutionizing legal tech with an AI-powered Legal Intelligence Platform trusted by some of the world's fastest-growing companies including Wiz, Socure, and Monday\nWe integrate seamlessly with Salesforce and other systems to help in-house legal teams accelerate negotiations, reduce risk, and unlock institutional knowledge through automated workflows\nWe're solving complex problems at the intersection of AI and legal operations. Join us as we scale our impact globally\nAbout the Role\nWe're looking for a Senior Application Security Engineer to dive deep into our codebase, infrastructure, and AI systems at Chamelio\n\nWe handle some of the most sensitive documents our customers have, and our buyers' security teams scrutinize us accordingly\n\nYou'll be our core hands-on security authority: conducting technical vulnerability assessments, performing manual code reviews, leading internal penetration testing, and implementing robust security controls directly across our platform\n\nThis is a deeply technical, hands-on role - if you thrive on auditing code, breaking application logic, finding zero-days, and writing security code to patch vulnerabilities, we want to hear from you\n\nWhat You'll Do\nPerform hands-on application security reviews, manual code audits, and static/dynamic analysis (SAST/DAST) on our product codebase\n\nConduct regular internal penetration testing, threat modeling, and security assessments across web application endpoints, cloud APIs, and microservices\n\nBuild automated security testing tools and integrate vulnerability scanning directly into our CI/CD pipelines\n\nIdentify, triage, and directly assist engineering teams in remediating complex application vulnerabilities and architectural flaws\n\nSet security standards and best practices across R&D and product as the internal authority on the subject\n\nPerform hands-on AI application security evaluations, testing LLMs and agentic workflows for prompt injection, data leakage, and access control bypasses\n\nPartner directly with developers to write secure libraries, harden authentication/authorization layers, and conduct incident response\n\nManage third-party external penetration tests and vulnerability disclosure programs\n\nWhat You'll Bring\nPassion to own and deliver - you take full responsibility for security outcomes and drive initiatives from idea to production\n\nCuriosity and adoption of AI tools - you actively use tools like Cursor or Claude Code and are excited about how AI is transforming both software development and the threat landscape\n\n5+ years of hands-on technical security experience focusing on application security, penetration testing, and vulnerability research\n\nDemonstrated proficiency in manual code auditing (Python, TypeScript) and web penetration testing methodologies (OWASP Top 10, SANS)\n\nStrong command of cloud security (AWS/GCP/Azure), web application security, and secure architecture design\n\nExperience with security and compliance standards such as SOC 1, SOC 2, ISO 27001, or NIST frameworks\n\nRelevant technical security certifications (OSCP, OSEP, OSWE, GWAPT, or equivalent practical credentials)\n\nA builder's mindset - comfortable establishing process and structure where none exists\n\nAbility to thrive in a fast-paced environment, balancing deep technical execution with high-level strategic and client conversations\n\nStrong communication skills, effective in a fast-paced startup environment\n\nBonus Points\nExperience hands-on exploiting or securing LLM-powered applications, agentic systems, or AI infrastructure (OWASP Top 10 for LLMs)\n\nBackground working with legal, financial, or other high-stakes documentheavy domains\n\nStrong development/coding capability in Python, Node.js/TypeScript, or Go for tooling and exploit POC creation\n\nExperience building a security function from scratch, especially as a founding or first security hire\n\nFamiliarity with Kubernetes, infrastructure-as-code, and cloud-native architectures\n\nChamelio might be a good fit if you:\nAre relentlessly resourceful: You find creative solutions and don't let obstacles slow you down\n\nHave a strong sense of urgency: You have a bias towards doing things today, rather than tomorrow\n\nThrive in startup environments: Fast-paced, high-impact work energizes you (preferred but not required)\n\nAre excited about the adventure: Building a company from the ground up excites you!","description_format":"text","description_chars":4399,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Legal AI","Legal Software"],"lifecycle":[{"event":"open","at":"2026-11-01T17:13:48Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":38,"reasons":["conf:2","win:early"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/chamelio-senior-application-security-engineer","json_url":"https://alion.io/job/chamelio-senior-application-security-engineer.json","meta":{"generated_at":"2026-11-03T07:40:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":10939,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1946173},"rest":"https://alion.io/mcp/rest/get_company?id=1946173"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fchamelio-senior-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fchamelio-senior-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fchamelio-senior-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/chamelio-senior-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fchamelio-senior-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3589777}},{"tool":"search_jobs","arguments":{"company":"chamelio.ai","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3589777},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}