Payoneer

Global payment platform for cross-border transactions

Application Security Engineer

Security Engineering & ArchitectureConfirmed live in the last 24 hours

Full-timeHerzliya, IsraelNo salary listed

About the Job

Requirements

At least 4 years of cybersecurity experience, including at least 2 years of Application Security or Product Security experience.
In-depth understanding of continuous integration and continuous delivery workflows and methodology; Azure DevOps and GitHub are advantages.
Familiarity with artificial intelligence and agentic architectures and the Model Context Protocol, with hands-on experience building custom skills and agents for security use cases.
Ability to communicate complex security concepts effectively to technical and non-technical stakeholders.
Ability to work on multiple projects in parallel and provide application security support to different teams and initiatives.

Responsibilities

Review and approve secure architecture designs for new features and use cases for customers, partners, integrators, or in-house solutions, considering best practices, regulatory requirements, business objectives, and artificial intelligence initiatives.
Collaborate with research and development and DevOps/DevSecOps teams to define security requirements and design robust security controls for on-premises and cloud systems.
Define continuous integration and continuous delivery processes and gates, including static application security testing, software composition analysis, secret scanning, and image and container scanning during continuous integration and runtime.
Provide technical guidance and expertise to internal teams selecting and integrating in-house solutions or third-party vendors.
Stay current with security technologies, threats, and trends, and recommend continuous improvements.
Serve as an application security subject matter expert, providing guidance and mentorship to other teams.
Optimize application security processes and workflows through artificial intelligence-powered tooling and automation.
Assist in creating or researching security solutions for on-premises, cloud, and artificial intelligence security challenges.

Desired Qualifications

A bachelor's degree in Computer Science, Information Security, or a related field.
Hands-on experience with security tools integrated into continuous integration and continuous delivery and production environments, such as SonarQube, Snyk, and Wiz.
Strong knowledge of AWS, Azure, and Google Cloud Platform and their security services and features.
Strong knowledge and experience with Kubernetes platform and services.
Knowledge of the Microsoft enterprise ecosystem, including Active Directory/Azure Entra ID, Office 365 APIs, and Azure cloud services.
Familiarity with GitHub and GitHub Actions, including experience with continuous integration and continuous delivery pipelines and source code management workflows.
Ability to read and review code, particularly in .NET, Node.js, and Python.
Additional Secure Software Development Lifecycle and Application Security skills, including risk assessments, threat modeling, vulnerability assessments, or penetration testing.
Experience in the fintech or financial services industry.
Familiarity with financial industry regulatory requirements and compliance standards, such as PCI DSS, PSD2, and GDPR.

About Payoneer

Founded in 2005, Payoneer is the global financial platform that removes friction from doing business across borders, with a mission to connect the world’s underserved businesses to a rising global economy. We’re a community with over 2,500 colleagues all over the world, working to serve customers, and partners in over 190 countries and territories.

By taking the complexity out of the financial workflows–including everything from global payments and compliance to multi-currency and workforce management, to providing working capital and business intelligence–we give businesses the tools they need to work efficiently worldwide and grow with confidence.

Role summary

We are seeking an Application Security Engineer to join our Cyber Team in Payoneer. As an Application Security Engineer, you will be responsible for overall Application Security standards, guidelines, and requirements for different groups in Payoneer. Your expertise in secure architecture, design, and SSDLC will play a crucial role in ensuring the security of our products and the protection of our sensitive financial data. This is a strategic position that offers an opportunity to shape and drive the security initiatives of our cutting-edge fintech solutions.

Glilot
Hybrid
Full-time

What you’ll do:

Review and approve secure architecture designs for new features and use-cases for Payoneer customers, partners, integrators or in-house solutions, considering best practices, regulatory requirements and business objectives, as well as many AI initiatives and use-cases.
Collaborate with cross-functional teams (mainly R&D and DevOps/DevSecOps) to define security requirements and design robust security controls for systems, both on-prem and in the cloud.
Define CI/CD processes and gates, such as SAST, SCA, Secret scanning and image/containers scanning during CI and Runtime.
Provide technical guidance and expertise to internal teams in selecting and integrating in-house solutions or third-party vendors.
Stay up-to-date with the latest security technologies, threats, and trends, and provide recommendations for continuous improvement.
Serve as a subject matter expert on application security, providing guidance and mentorship to other teams in the company.
Optimizing AppSec processes and workflows through AI-powered tooling and automation.
Assist in creating or researching for security solutions – solving security challenges, both on-prem, in the cloud and in the AI domain.

Who you are:

4+ years of experience in cybersecurity, including at least 2 years of experience in Application Security \ Product Security.
In-depth understanding of CI/CD workflows and methodology (Azure DevOps and Github is an advantage).
Familiarity with AI/agentic architectures and the MCP, with hands-on experience building custom skills and agents for security use cases.
Excellent communication and collaboration skills, with the ability to effectively convey complex security concepts to technical and non-technical stakeholders.
Multi-task skills: ability to work on multiple projects in parallel, providing application security support for different teams and initiatives in the company.

Advantages:

Bachelor's degree in Computer Science, Information Security, or a related field.
Experience/familiarity (hands-on) with security tools integrated into our CI/CD and production environments such as SonarQube, Snyk, Wiz and others.
Strong knowledge with AWS, Azure and GCP as well as their associated security services and features.
Strong knowledge and experience with Kubernetes platform and services.
knowledge with Microsoft enterprise ecosystem, including Active Directory/Azure Entra ID, Office 365 APIs, Azure Cloud services.
Familiarity with GitHub and GitHub Actions, including experience working with CI/CD pipelines and source code management workflows.
Ability to read and review code, particularly in .NET, Node.js, and Python.
Additional skills related to Secure Software Development Lifecycle (SSDLC) and Application Security (AppSec) further enhance the candidate's value. These skills may include risk assessments, threat modeling, vulnerability assessments or penetration testing.
Experience in fintech or financial services industry.
Familiarity with regulatory requirements and compliance standards in the financial industry, such as PCI DSS, PSD2 and GDPR.

#LI-AG2

The Payoneer Ways of Working

Act as our customer’s partner on the insideLearning what they need and creating what will help them go further.

Do it. Own it.Being fearlessly accountable in everything we do.

Continuously improve
Always striving for a higher standard than our last.

Build each other upHelping each other grow, as professionals and people.

If this sounds like a business, a community, and a mission you want to be part of, apply today.

We are committed to providing a diverse and inclusive workplace. Payoneer is an equal opportunity employer, and all qualified applicants will receive consideration for employment no matter your race, color, ancestry, religion, sex, sexual orientation, gender identity, national origin, age, disability status, protected veteran status, or any other characteristic protected by law. If you require reasonable accommodation at any stage of the hiring process, please speak to the recruiter managing the role for any adjustments. Decisions about requests for reasonable accommodation are made on a case-by-case basis.

About the Company

Payoneer

Global payment platform for cross-border transactions

Payoneer provides a global payment platform that helps businesses send and receive money across borders in multiple currencies. It works by giving businesses accounts and payment tools that let them pay suppliers and get paid by customers as if they were local, instead of using costly international wire transfers. It also connects users to major online marketplaces to expand sales opportunities. Compared with traditional banks and other fintechs, Payoneer focuses on reducing transfer fees and simplifying cross-border transactions through a multi-currency account and marketplace connections. The company’s goal is to enable easy, low-cost international payments to support global business expansion.

Company size: 1,001-5,000
Company stage: IPO
Headquarters: New York City, New York
Founded: 2005

Recently Posted Jobs

Explore more opportunities at Payoneer

See more jobs