{"id":2498425,"url":"https://alion.io/job/onezerobank-application-security-engineer","title":"Application Security Engineer","company":{"id":1953591,"name":"Onezerobank","domain":"onezerobank.com","url":"https://alion.io/company/onezerobank","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":73000,"max_usd":175000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"Kotlin","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"Python","optional":false},{"name":"RAG","optional":false},{"name":"Swift","optional":false},{"name":"Threat Modeling","optional":false},{"name":"TypeScript","optional":false}],"status":"live","first_seen_at":"2026-10-13T12:33:39Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-14T20:45:48Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Description\nAt ONE ZERO, Israel’s first fully digital bank, we’re building secure and innovative financial products that redefine the banking experience.\nWe are looking for a hands-on Application Security Engineer with a strong understanding of software development and application security across Web and Native Mobile applications. In this role, you will work closely with development teams to embed security throughout the SDLC, identify and mitigate risks, and help build secure-by-design solutions across our products and services.\nYour Day-to-Day\nEmbed security into the SDLC / SSDLC and work closely with development teams.\nPerform application security reviews, threat modeling, and security assessments.\nIdentify vulnerabilities across Web, Android, iOS, APIs, CI/CD pipelines, and software supply-chain processes.\nAnalyze business logic flaws, authorization issues, insecure workflows, and abuse scenarios.\nHelp developers remediate vulnerabilities and design secure solutions.\nImprove and automate security controls across the development lifecycle.\nBuild internal security tools for testing, detection, and prevention.\nDevelop and integrate AI-powered security solutions, including LLM-based tools, agents, and automated code/security analysis.\nRequirements\n3-5 years of experience in Application Security, Product Security, Security Engineering, or software development with strong security experience.\nStrong understanding of software development and the ability to read and understand code.\nHands-on knowledge of Web application security and Native Mobile security for Android and iOS.\nGood knowledge of OWASP, OWASP Mobile, API Security, authentication, authorization, and secure coding.\nExperience with CI/CD security, SAST, DAST, SCA, secrets management, and dependency risks.\nAbility to understand both technical vulnerabilities and business-logic security risks.\nDevelopment or scripting experience in languages such as Python, Java, Kotlin, JavaScript/TypeScript, or similar.\nHands-on familiarity with AI/LLM technologies and the ability to build security-focused tools or automations.\nAdvantages\nPrevious experience as a software developer.\nExperience with Kotlin and/or Swift.\nExperience with mobile application internals and mobile security testing.\nExperience with cloud, Kubernetes, containers, or IaC.\nExperience with LLM APIs, AI agents, RAG, or AI-assisted code analysis.\nUnderstanding of AI security risks such as prompt injection, data leakage, and excessive permissions.","description_format":"text","description_chars":2501,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-14T05:20:55Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":19,"reasons":["conf:1","win:early"],"computed_at":"2026-10-14T06:34:16Z"},"pay":null,"html_url":"https://alion.io/job/onezerobank-application-security-engineer","json_url":"https://alion.io/job/onezerobank-application-security-engineer.json","meta":{"generated_at":"2026-10-14T21:21:14Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":28517,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1953591},"rest":"https://alion.io/mcp/rest/get_company?id=1953591"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fonezerobank-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fonezerobank-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fonezerobank-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/onezerobank-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fonezerobank-application-security-engineer"}]}