{"id":2501815,"url":"https://alion.io/job/sunbit-application-security-engineer","title":"Application Security Engineer","company":{"id":58831,"name":"Sunbit","domain":"sunbit.com","url":"https://alion.io/company/sunbit","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":97000,"max_usd":223000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitOps","optional":false},{"name":"Kubernetes","optional":false},{"name":"Threat Modeling","optional":false},{"name":"LLM","optional":true},{"name":"Terraform","optional":true}],"status":"live","first_seen_at":"2026-10-12T15:13:32Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-16T00:20:54Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Description\nAt Sunbit, we're building financial technology that puts people first. By combining intelligent decisioning with a personalized, transparent approach, we help consumers access the payment options that are right for them while empowering merchants to build stronger customer relationships.\nEngineering is at the heart of how we make that happen. We build scalable distributed systems, cloud-native services, intelligent data platforms, and AI-powered solutions that enable real-time financial decisions at scale. By leveraging modern engineering practices and integrating AI into both our products and development workflows, we solve complex technical challenges, accelerate innovation, and continuously improve the way we build software. Every service, model, and architectural decision we make directly impacts our products, our customers, and the future of financial technology.\nAbout the Role\nWe are looking for an Application Security Engineer to join our Security Engineering team.\nYou will take ownership of strengthening security across Sunbit’s products, services, and development lifecycle. This includes identifying and addressing security gaps in application architecture and code, APIs and service-to-service communication, authentication and authorization flows, open source dependencies and third-party libraries, CI/CD pipelines and build systems, secrets handling, and AI-powered product features.\nAs a Security Engineer at Sunbit, you will dig into how our systems actually work, understand where the real risk is, and decide what needs to be built to close it. Some problems are solved by changing an architecture or a design pattern, others by implementing a new control, embedding a security gate into the pipeline, integrating and tailoring a security platform, or writing something from scratch. You will own that decision and the implementation that follows.\nThe Security Engineering team works as a group of all-rounders. Alongside your core focus, you will contribute to cloud and infrastructure security, corporate IT security, detection engineering, incident response, and our growing AI security work, both securing AI workloads and using AI to make our own security capabilities better.\nWhat You Will Work On\nIdentify security gaps across Sunbit’s applications, services, and development lifecycle, then translate them into practical technical solutions.\nDesign and implement scalable security controls that address root causes and fit our architecture and engineering practices.\nReview architectures and designs, run threat modeling, and guide R&D teams toward secure patterns before code is written.\nSecure APIs, authentication and authorization flows, service-to-service trust, data handling, and multi-tenant boundaries.\nOwn the secure development lifecycle end to end, including security gates in GitHub Actions, SAST, SCA, secrets scanning, and dependency and supply chain risk.\nBuild reusable security capabilities, libraries, paved-road patterns, and developer-facing tooling that make the secure path the default path.\nBuild custom AI agents and AI-powered capabilities that improve our security tools, workflows, visibility, and control.\nUnderstand and secure AI-powered product features, including their data access, identities, permissions, integrations, and runtime behavior.\nPartner with R&D, DevOps, Infrastructure, Data, AI, and IT teams from initial analysis through implementation, adoption, and validation.\nRequirements\nAt least 5 years of hands-on experience in application security, product security, security engineering, DevSecOps, or a related field.\nStrong experience securing production applications and services, including APIs, microservices, and cloud-native workloads on AWS and Kubernetes.\nProven ability to identify security gaps, design appropriate controls, and take solutions through implementation.\nHands-on experience with secure code review, threat modeling, API security, and common vulnerability classes in modern application stacks.\nPractical experience embedding security into CI/CD and GitOps workflows, including GitHub Actions, SAST, DAST, SCA, and secrets scanning.\nStrong understanding of authentication and authorization, session management, secrets management, cryptography in practice, TLS, SSO, SAML, and OIDC.\nAbility to read and write code in at least one modern language, and enough engineering depth to work as a peer to developers.\nA broad security mindset, strong engineering judgment, and the ability to collaborate effectively with technical teams.\nNice to Have\nExperience building AI agents, LLM-based tools, or AI-powered security capabilities.\nExperience assessing or securing AI workloads, including data exposure, prompt injection, agent permissions, and third-party integrations.\nExperience with ASPM platforms, WAF, bot and abuse prevention, or runtime application protection.\nFamiliarity with cloud and infrastructure security, Terraform, policy as code, and container security.\nOffensive security background, such as penetration testing, bug bounty, or exploit development.\nExperience working in a regulated fintech or financial services environment.\nRecruitment Fraud Disclaimer\nWe’ve been made aware of fraudsters impersonating Sunbit employees during the hiring process. Please note that all official communication will come from an @sunbit.com email address, through our applicant tracking platform @sunbit.comeet-notifications.com or directly via LinkedIn. We will never ask for your age, Social Security number, bank account details, payment of any kind, or other unrelated personal information during the application process. Our hiring process always includes interviews, either by phone, zoom, or in person, before any offer is made. If something feels suspicious, please contact us at HR to confirm. We ask that you contact HR only about potential instances of fraud. HR does not reach our recruiting team directly. Your application directly through the posting is the best way to ensure that your candidacy is reviewed by our team. Due to the volume of applications, we will not respond to nor forward emails about your candidacy that are sent to HR directly, and your email about your application will be deleted from our systems.","description_format":"text","description_chars":6251,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Buy Now, Pay Later"],"lifecycle":[{"event":"open","at":"2026-10-14T06:11:30Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":46,"reasons":["conf:0","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/sunbit-application-security-engineer","json_url":"https://alion.io/job/sunbit-application-security-engineer.json","meta":{"generated_at":"2026-10-16T02:18:56Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3581,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":58831},"rest":"https://alion.io/mcp/rest/get_company?id=58831"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsunbit-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsunbit-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsunbit-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sunbit-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsunbit-application-security-engineer"}]}