# Senior Application Security Engineer

[Crossriver](https://gurify.com/jobs?q=Crossriver) · Jerusalem, Israel · Posted 8 weeks ago

Senior

[Security](https://gurify.com/jobs/security)

[Apply on the original posting → (opens in a new tab)](https://www.comeet.com/jobs/crossriver/C7.00F/senior-application-security-engineer/07.16B)

## Job description

### We are

At Cross River, we're building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely.

With 900+ employees worldwide and an R&D center of over 160 employees in Jerusalem - we’re reshaping how financial technology is developed and delivered.

### The Role

We’re seeking a Senior Application Security Engineer who is first and foremost a teacher, advisor, and enabler for our development teams.

Rather than owning security alone, you’ll embed secure-by-design thinking across engineering by mentoring developers, guiding architecture decisions, and making secure development intuitive and frictionless.

You’ll serve as the go-to partner for developers and engineering leaders, offering clear direction, practical solutions, and hands-on mentorship that strengthens our secure SDLC.

### Who You Are

- A proactive self-starter with deep expertise in application and cloud security

- Passionate about secure development and enabling engineers through thoughtful guardrails

- Clear and confident communicator who can influence across technical and non-technical teams

- Curious about emerging threats and excited by the challenges of blockchain security

- Committed to excellence, with a strong sense of ownership and a drive to build secure systems that scale

### What You’ll Actually Be Doing

- Mentor, coach, and educate developers on secure coding through workshops, training sessions, pair reviews, and ongoing guidance

- Lead and scale a Security Champions program embedded within engineering teams

- Facilitate threat modeling sessions and design reviews, partnering with teams early in the process to improve security outcomes

- Collaborate with engineering leadership to ensure secure architecture patterns, API security practices, and design principles are built in from day one

- Integrate and tune developer-friendly AppSec guardrails into CI/CD pipelines (SAST, SCA, IaC, secret scanning) while minimizing noise for developers

- Translate vulnerabilities into clear, actionable remediation guidance that developers can easily implement

- Support security awareness across engineering by building engaging internal content, best-practice playbooks, and reusable patterns

- Partner with compliance teams to produce documentation and SDLC evidence supporting FFIEC, PCI DSS, and SOC 2 requirements

- Stay current on emerging threats, developer tooling, and secure engineering patterns — sharing insights regularly with the team

### Requirements

### What You Bring to the Table

- Native level fluency in English and Hebrew (written and verbal) - Must

- 7+ years in software security engineering, including 4-5 years in AppSec of secure development enablement roles

- Strong coding ability in one or more modern languages (JavaScript/TypeScript, Python, Go, Java, C#)

- Proven experience teaching, mentoring, or enabling developers through training, code reviews, threat modeling, internal talks, or champion programs

- Deep understanding of secure coding principles, common vulnerability classes, API security, and secure design techniques

- Hands-on Experience with AppSec tooling (SAST, SCA, IaC scanners, secret scanning) and integrating them into the developer workflows

- Experience with cloud native architectures and security in AWS or Azure

- Familiarity with compliance and security frameworks (PCI DSS, SOC 2, FEIEC, NIST, OWASP, ASVS)

- Excellent communication and storytelling skills - able to break down complex issues into simple, practical guidance

- A collaborative mindset and passion for building a positive, empowering security culture

### Why You’ll Love Working Here

- Flexible hybrid model: 3 days a week in the office

- ₪1,000 net monthly wellness benefit – from therapy to Pilates to your kid’s art class

- Full Keren Hishtalmut, private health & dental insurance

- Donation matching, volunteering days, team outings, and mentorship programs

- A mission-driven culture that values ownership, trust, and meaningful impact

### Next Step

Hit Apply!

**Live in Crossriver’s hiring system.** Read from the company's own applicant tracking system, not reposted from a job board — so it's a real, open requisition rather than an ad that outlived the role.

We remove it as soon as it disappears at source.

## More jobs like this

- ON [Application Security Engineer - ONE ZERO](https://gurify.com/job/application-security-engineer-one-zero-at-onezerobank-2e8386af9bda) Onezerobank · Tel Aviv-Yafo, Israel · last week
- CR [AI Security Engineer](https://gurify.com/job/ai-security-engineer-at-crossriver-14ec056f6cbd) Crossriver · Jerusalem, Israel · 7 weeks ago
- DR [Senior Network & Security Engineer](https://gurify.com/job/senior-network-security-engineer-at-drivenets-547671ce485a) Drivenets · Tel Aviv, Israel · 6 days ago
- DR [Senior Network & Security Engineer](https://gurify.com/job/senior-network-security-engineer-at-drivenets-a96e1dd1d282) Drivenets · Raanana, Israel · 6 days ago
- VA [Senior Security Engineer](https://gurify.com/job/senior-security-engineer-at-vastdata-514171dde2fc) Vastdata · Tel Aviv-Yafo, Israel · 2 weeks ago
- CR [Mid-Level, Security Engineer](https://gurify.com/job/mid-level-security-engineer-at-crossriver-742531cc5399) Crossriver · Jerusalem, Israel · 8 weeks ago

```json
{"@context":"https://schema.org/","@type":"JobPosting","title":"Senior Application Security Engineer","description":"\u003Ch3\u003EWe are\u003C/h3\u003E\u003Cp\u003EAt Cross River, we\u0026#39;re building the financial infrastructure that powers global innovation. With our cutting-edge suite of embedded payments, cards, and lending solutions, we enable millions of businesses and consumers to transact seamlessly and securely.\u003C/p\u003E\u003Cp\u003EWith 900\u002B employees worldwide and an R\u0026amp;D center of over 160 employees in Jerusalem - we\u2019re reshaping how financial technology is developed and delivered.\u003C/p\u003E\u003Ch3\u003EThe Role\u003C/h3\u003E\u003Cp\u003EWe\u2019re seeking a Senior Application Security Engineer who is first and foremost a teacher, advisor, and enabler for our development teams.\u003C/p\u003E\u003Cp\u003ERather than owning security alone, you\u2019ll embed secure-by-design thinking across engineering by mentoring developers, guiding architecture decisions, and making secure development intuitive and frictionless.\u003C/p\u003E\u003Cp\u003EYou\u2019ll serve as the go-to partner for developers and engineering leaders, offering clear direction, practical solutions, and hands-on mentorship that strengthens our secure SDLC.\u003C/p\u003E\u003Ch3\u003EWho You Are\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EA proactive self-starter with deep expertise in application and cloud security\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPassionate about secure development and enabling engineers through thoughtful guardrails\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EClear and confident communicator who can influence across technical and non-technical teams\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECurious about emerging threats and excited by the challenges of blockchain security\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECommitted to excellence, with a strong sense of ownership and a drive to build secure systems that scale\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhat You\u2019ll Actually Be Doing\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EMentor, coach, and educate developers on secure coding through workshops, training sessions, pair reviews, and ongoing guidance\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ELead and scale a Security Champions program embedded within engineering teams\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFacilitate threat modeling sessions and design reviews, partnering with teams early in the process to improve security outcomes\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ECollaborate with engineering leadership to ensure secure architecture patterns, API security practices, and design principles are built in from day one\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EIntegrate and tune developer-friendly AppSec guardrails into CI/CD pipelines (SAST, SCA, IaC, secret scanning) while minimizing noise for developers\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ETranslate vulnerabilities into clear, actionable remediation guidance that developers can easily implement\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003ESupport security awareness across engineering by building engaging internal content, best-practice playbooks, and reusable patterns\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EPartner with compliance teams to produce documentation and SDLC evidence supporting FFIEC, PCI DSS, and SOC 2 requirements\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStay current on emerging threats, developer tooling, and secure engineering patterns \u2014 sharing insights regularly with the team\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ERequirements\u003C/h3\u003E\u003Ch3\u003EWhat You Bring to the Table\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003ENative level fluency in English and Hebrew (written and verbal) - Must\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E7\u002B years in software security engineering, including 4-5 years in AppSec of secure development enablement roles\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EStrong coding ability in one or more modern languages (JavaScript/TypeScript, Python, Go, Java, C#)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EProven experience teaching, mentoring, or enabling developers through training, code reviews, threat modeling, internal talks, or champion programs\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDeep understanding of secure coding principles, common vulnerability classes, API security, and secure design techniques\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EHands-on Experience with AppSec tooling (SAST, SCA, IaC scanners, secret scanning) and integrating them into the developer workflows\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExperience with cloud native architectures and security in AWS or Azure\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFamiliarity with compliance and security frameworks (PCI DSS, SOC 2, FEIEC, NIST, OWASP, ASVS)\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EExcellent communication and storytelling skills - able to break down complex issues into simple, practical guidance\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA collaborative mindset and passion for building a positive, empowering security culture\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003EWhy You\u2019ll Love Working Here\u003C/h3\u003E\u003Cul\u003E\u003Cli\u003EFlexible hybrid model: 3 days a week in the office\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003E\u20AA1,000 net monthly wellness benefit \u2013 from therapy to Pilates to your kid\u2019s art class\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EFull Keren Hishtalmut, private health \u0026amp; dental insurance\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EDonation matching, volunteering days, team outings, and mentorship programs\u003C/li\u003E\u003C/ul\u003E\u003Cul\u003E\u003Cli\u003EA mission-driven culture that values ownership, trust, and meaningful impact\u003C/li\u003E\u003C/ul\u003E\u003Ch3\u003ENext Step\u003C/h3\u003E\u003Cp\u003EHit Apply!\u003C/p\u003E","identifier":{"@type":"PropertyValue","name":"Gurify","value":"senior-application-security-engineer-at-crossriver-600f9360b683"},"url":"https://gurify.com/job/senior-application-security-engineer-at-crossriver-600f9360b683","datePosted":"2026-07-26","validThrough":"2026-11-04T23:59:59Z","hiringOrganization":{"@type":"Organization","name":"Crossriver","sameAs":"https://www.comeet.com/jobs/crossriver"},"directApply":false,"jobLocation":{"@type":"Place","address":{"@type":"PostalAddress","addressCountry":"IL","addressLocality":"Jerusalem"}}}
```

```json
{"@context":"https://schema.org/","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Jobs","item":"https://gurify.com/jobs"},{"@type":"ListItem","position":2,"name":"Israel","item":"https://gurify.com/jobs/israel"},{"@type":"ListItem","position":3,"name":"Senior Application Security Engineer","item":"https://gurify.com/job/senior-application-security-engineer-at-crossriver-600f9360b683"}]}
```