Work Location: Holon, Israel - We work in a Hybrid working model (work from home a few times a week) About Sapiens Sapiens International Corporation (NASDAQ and TASE: SPNS) is a leading global provider of software solutions for the insurance industry, with a growing presence in the financial services sector. We offer integrated core software solutions and business services, and a full digital suite for the property and casualty/general insurance; life, pension, and annuities; and reinsurance markets. Sapiens also services the workers’ compensation and financial and compliance markets. Our portfolio includes policy administration, billing, and claims; underwriting, illustration and electronic application; reinsurance and decision management software. Sapiens’ digital platform features customer and agent portals, and a business intelligence platform. With a 30-year track record of delivering to more than 600 organizations, Sapiens’ team of over 4,000 employees operates through our fully-owned subsidiaries in North America, the United Kingdom, EMEA, and Asia Pacific. For more information: <a href="http://www.sapiens.com" style="text-decoration:underline">www.sapiens.com</a>. Job Description The Senior Application Security Lead at Sapiens is an Expert, a Leader and an Influencer who owns the application security globally. He plays an instrumental role in leading all of the aspects related to it, define the best policies and makes sure it is implemented and applied with the highest quality standards. Main Responsibilities The main responsibilities of the Senior Application Security Lead include (but are not limited to): <ul> <li>Play a lead role in developing and designing application-level security controls and standards;</li> <li>Lead and manage Sapiens bug bounty program;</li> <li>Perform application security design reviews against new products and services;</li> <li>Track and prioritize all security issues;</li> <li>Build internal security tools that help fix security problems at scale;</li> <li>Perform code review and drive remediation of discovered issues;</li> <li>Enable automated security testing at scale to measure vulnerability, and report on risk across all microservice, web and mobile platforms;</li> <li>Build the security development training and awareness program to train developers on secure coding practices;</li> <li>Implement static/dynamic code analysis tools;</li> <li>Execute security tests on thousands of servers which are spread across multiple data centers;</li> <li>Create Secured SDLC policies. </li> </ul> Skills and Experience <ul> <li>5+ years of proven experience in application security & secure development;</li> <li>Strong foundations in software engineering;</li> <li>Experience or working knowledge of modern development, test, and deployment models;</li> <li>Demonstrate expertise in application security domain and architecture design;</li> <li>Understanding of application security in context of SDLC and CI-CD;</li> <li>Understanding of OWASP MASVS and ASVS;</li> <li>Working knowledge on exploiting and fixing application vulnerabilities;</li> <li>In-depth knowledge of common web application vulnerabilities (i.e. OWASP Top 10);</li> <li>An analytical mind for problem solving, abstract thought, and offensive security tactics;</li> <li>Highly effective communication skills, in both verbal and written forms, to effectively convey technical and non-technical concepts to a wide variety of audiences;</li> <li>In-depth knowledge of cloud-native ecosystem – An advantage; </li> <li>Strong background in threat modeling - An advantage; </li> <li>Familiarity with industry standard secure design models - An advantage; </li> <li>Familiarity with automated dynamic scanners and proxy tools – An advantage. </li> </ul> Languages <ul> <li>Excellent written and verbal English.</li> </ul> Sapiens is an E-Verified & Equal Opportunity/Affirmative Action Employer, M/F/D/V.

Senior Application Security Lead (Holon, IL) @ sapienst1

About this role

Ready to apply?