{"id":301887,"url":"https://alion.io/job/jfrog-application-security-engineer","title":"Application Security Engineer","company":{"id":7027,"name":"JFrog","domain":"jfrog.com","url":"https://alion.io/company/jfrog","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"B","score":75,"open_postings":10,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":101000,"max_usd":233000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2372},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"Kubernetes","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Machine Learning","optional":true}],"status":"live","first_seen_at":"2026-09-03T12:38:52Z","employer_posted_date":null,"last_verified_at":"2026-09-03T12:38:52Z","board_verified":false,"closed_at":null,"days_open":56,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":56},"description":"At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts is a true pioneer, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit, and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production - a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey?\nThe JFrog CSO Office is seeking an Application Security Engineer. In this role, you will contribute to driving security across the SDLC at scale, empowering developers, and enabling secure development through automation, process, and tooling. You’ll work as part of a team of security engineers focused on SSDLC automation, vulnerability management, and proactive engagement with R&D. This is a hands-on technical role that combines architecture, coding, and collaboration, working closely with Product, Engineering, DevOps, and Security stakeholders.\nAs an Application Security Engineer at JFrog you will...\nAssist in the development of internal security tools and AI agents\nSupport the design and implementation of SSDLC practices and automated security controls across the CI/CD pipeline\nContribute to building and operating scalable vulnerability management frameworks across cloud-native services and SaaS products\nIntegrate security into Agile and DevOps processes, including threat modeling, SAST, DAST, and SCA\nDevelop Internal application security Tools and Automations\nPartner with development and DevOps teams to embed security early and often\nContribute to secure code reviews and assist with remediation strategies\nTrack, triage, and report vulnerabilities across product lines\nSupport the adoption of secure development best practices\nTo be an Application Security Engineer at JFrog, you need…\n6-7 years of experience in AppSec And Product Security\nDeep knowledge in application security and vulnerabilities.\nStrong coding/scripting background (e.g., Python, Go, Java, JavaScript)\nHands-on experience with CI/CD pipelines, security tools, and DevSecOps practices\nFamiliarity with modern architectures (e.g., Cloud, microservices, containers, Kubernetes)\nUnderstanding of software development processes and secure coding principles.\nStrong communication and collaboration skills\nPenetration testing knowledge is a plus\nFamiliarity with machine learning and AI concepts applied to security (e.g., anomaly detection, predictive analytics) is a strong advantage","description_format":"text","description_chars":2687,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevOps & Platform Engineering","Developer Tools"],"lifecycle":[{"event":"open","at":"2026-09-05T15:13:52Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 8 · green card filings: 5","filings_12m":8,"filings_prev_12m":17,"green_card_filings_12m":5,"median_offered_wage_usd":159808,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":12,"band":"cold","label":"Long shot","p_open":0.4,"p_active":0.525,"p_room":0.55,"age_days":55,"expected_fill_days":40,"reasons":["seen:55","stale_co","velocity","win:tail"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/jfrog-application-security-engineer","json_url":"https://alion.io/job/jfrog-application-security-engineer.json","meta":{"generated_at":"2026-10-29T15:15:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22852,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7027},"rest":"https://alion.io/mcp/rest/get_company?id=7027"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fjfrog-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fjfrog-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fjfrog-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/jfrog-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fjfrog-application-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":301887}},{"tool":"search_jobs","arguments":{"company":"jfrog.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":301887},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}