# Application Security Engineer - ONE ZERO

[Onezerobank](https://gurify.com/jobs?q=Onezerobank) · Tel Aviv-Yafo, Israel · Posted yesterday

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://www.comeet.com/jobs/onezerobank/36.00A/application-security-engineer/B4.277)

## Job description

At ONE ZERO, Israel’s first fully digital bank, we’re building secure and innovative financial products that redefine the banking experience.

We are looking for a hands-on Application Security Engineer with a strong understanding of software development and application security across Web and Native Mobile applications. In this role, you will work closely with development teams to embed security throughout the SDLC, identify and mitigate risks, and help build secure-by-design solutions across our products and services.

### Your Day-to-Day

- Embed security into the SDLC / SSDLC and work closely with development teams.

- Perform application security reviews, threat modeling, and security assessments.

- Identify vulnerabilities across Web, Android, iOS, APIs, CI/CD pipelines, and software supply-chain processes.

- Analyze business logic flaws, authorization issues, insecure workflows, and abuse scenarios.

- Help developers remediate vulnerabilities and design secure solutions.

- Improve and automate security controls across the development lifecycle.

- Build internal security tools for testing, detection, and prevention.

- Develop and integrate AI-powered security solutions, including LLM-based tools, agents, and automated code/security analysis.

### Requirements

- 3–5 years of experience in Application Security, Product Security, Security Engineering, or software development with strong security experience.

- Strong understanding of software development and the ability to read and understand code.

- Hands-on knowledge of Web application security and Native Mobile security for Android and iOS.

- Good knowledge of OWASP, OWASP Mobile, API Security, authentication, authorization, and secure coding.

- Experience with CI/CD security, SAST, DAST, SCA, secrets management, and dependency risks.

- Ability to understand both technical vulnerabilities and business-logic security risks.

- Development or scripting experience in languages such as Python, Java, Kotlin, JavaScript/TypeScript, or similar.

- Hands-on familiarity with AI/LLM technologies and the ability to build security-focused tools or automations.

### Advantages

- Previous experience as a software developer.

- Experience with Kotlin and/or Swift.

- Experience with mobile application internals and mobile security testing.

- Experience with cloud, Kubernetes, containers, or IaC.

- Experience with LLM APIs, AI agents, RAG, or AI-assisted code analysis.

- Understanding of AI security risks such as prompt injection, data leakage, and excessive permissions.

**Live in Onezerobank’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- VA [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-vastdata-514171dde2fc) Vastdata · Tel Aviv-Yafo, Israel · 5 days ago
- ZE [OT Security Team at Zero Networks](https://gurify.com/job/ot-security-team-at-zero-networks-at-zeronetworks-13170f9acd01) Zeronetworks · Ramat Gan, Israel · last week
- VE [Cyber Security Training Engineer](https://gurify.com/job/cyber-security-training-engineer-at-vega-733d7970297c) Vega · Tel Aviv-Yafo, Israel · 2 weeks ago
- ME [Security Automation & Detection Engineer](https://gurify.com/job/security-automation-detection-engineer-at-mergroup-4740e1f968ef) Mergroup · Or Yehuda, Israel · 2 weeks ago
- CR [Senior Application Security Engineer](https://gurify.com/job/senior-application-security-engineer-at-crossriver-600f9360b683) Crossriver · Jerusalem, Israel · 6 weeks ago
- CL [Network Security Engineer](https://gurify.com/job/network-security-engineer-at-classiq-8fadbac800f5) Classiq · Tel Aviv-Yafo, Israel · 2 weeks ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Application Security Engineer - ONE ZERO","description":"\u003Cp\u003EAt ONE ZERO, Israel\u2019s first fully digital bank, we\u2019re building secure and innovative financial products that redefine the banking experience.\u003C/p\u003E\u003Cp\u003EWe are looking for a hands-on Application Security Engineer with a strong understanding of software development and application security across Web and Native Mobile applications. In this role, you will work closely with development teams to embed security throughout the SDLC, identify and mitigate risks, and help build secure-by-design solutions across our products and services.\u003C/p\u003E\u003Ch3\u003EYour Day-to-Day\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EEmbed security into the SDLC / SSDLC and work closely with development teams.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPerform application security reviews, threat modeling, and security assessments.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EIdentify vulnerabilities across Web, Android, iOS, APIs, CI/CD pipelines, and software supply-chain processes.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAnalyze business logic flaws, authorization issues, insecure workflows, and abuse scenarios.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHelp developers remediate vulnerabilities and design secure solutions.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EImprove and automate security controls across the development lifecycle.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EBuild internal security tools for testing, detection, and prevention.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDevelop and integrate AI-powered security solutions, including LLM-based tools, agents, and automated code/security analysis.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ERequirements\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003E3\u20135 years of experience in Application Security, Product Security, Security Engineering, or software development with strong security experience.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong understanding of software development and the ability to read and understand code.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on knowledge of Web application security and Native Mobile security for Android and iOS.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EGood knowledge of OWASP, OWASP Mobile, API Security, authentication, authorization, and secure coding.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with CI/CD security, SAST, DAST, SCA, secrets management, and dependency risks.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EAbility to understand both technical vulnerabilities and business-logic security risks.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDevelopment or scripting experience in languages such as Python, Java, Kotlin, JavaScript/TypeScript, or similar.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on familiarity with AI/LLM technologies and the ability to build security-focused tools or automations.\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EAdvantages\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EPrevious experience as a software developer.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with Kotlin and/or Swift.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with mobile application internals and mobile security testing.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with cloud, Kubernetes, containers, or IaC.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with LLM APIs, AI agents, RAG, or AI-assisted code analysis.\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EUnderstanding of AI security risks such as prompt injection, data leakage, and excessive permissions.\u003C/li\u003E\u003C/ul\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"application-security-engineer-one-zero-at-onezerobank-2e8386af9bda"},"url":"https://gurify.com/job/application-security-engineer-one-zero-at-onezerobank-2e8386af9bda","datePosted":"2026-09-07","validThrough":"2026-10-23T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Onezerobank","sameAs":"https://www.comeet.com/jobs/onezerobank"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"IL","addressLocality":"Tel Aviv-Yafo"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Israel","item":"https://gurify.com/jobs/israel"},{"@type":"ListItem","position":3,"name":"Application Security Engineer - ONE ZERO","item":"https://gurify.com/job/application-security-engineer-one-zero-at-onezerobank-2e8386af9bda"}]}
```