Application Security Engineer - AI & Product Security
Senior DevSecOps Engineer at Artlist in Tel Aviv, embedding security across product design, CI/CD, cloud infrastructure (AWS/GCP), and AI/LLM systems — threat modeling, WAF and DDoS protection, incident response, and SOC 2/ISO 27001 support, with Python/Go/Bash automation.
- Compensation
- Not disclosed
- Location
- Tel Aviv-Yafo, Tel Aviv District
- Work setup
- Hybrid
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- 4+ years in DevSecOps, AppSec, or Security Engineering, owning production systems
- Track record embedding security into product design, not just reviewing after the fact
- Hands-on GCP/AWS security experience
- Practical AI/LLM security knowledge — model access, data leakage, prompt injection
- Hands-on WAF and site protection experience
- Scripting/automation skills (Python, Go, or Bash)
- Fluent English
Nice to have
- Experience securing generative AI or ML product features in production
- Familiarity with AI gateways (LiteLLM, OpenRouter, Bedrock) and LLM observability tools
- Relevant certifications (CISSP, GCP/AWS security)
Full description
Artlist is a leading creative technology company on a mission to empower creators and brands to bring their vision to life with video. Offering cutting-edge AI tools and models for image, video, and voiceover creation, alongside high-quality creative assets and powerful editing tools, Artlist enables creators to stay on trend and achieve their creative goals.
Trusted by over 30 million creators worldwide and top brands including Google, Amazon, Microsoft, and Versace, Artlist provides a seamless, subscription-based platform with a global license, giving creators everything they need to produce professional video content efficiently. For more information, visit .
About the role
We're looking for an Application Security Engineer to join Artlist's security team and work closely with Product and R&D on securing our applications, development processes, and AI-powered products.
This is a hands-on engineering role for someone with a strong Application Security foundation who enjoys working directly with developers, building security automation, and helping teams design and ship secure products.
You'll work across Application Security, cloud security, and AI-related security challenges, with significant ownership and the opportunity to shape how security is implemented across Artlist.
What you'll do
- Partner with R&D and Product on threat modeling and secure design reviews.
- Embed security controls into the SDLC and CI/CD pipelines.
- Identify and remediate application and API security risks.
- Integrate and improve security tooling such as SAST, SCA, WAF and cloud security tools.
- Build security automation and internal tooling using Python, Bash or similar languages.
- Help secure cloud environments and production applications.
- Define practical security guardrails around authentication, authorization, data exposure, injection risks and rate limiting.
- Contribute to the security of AI-powered product features, including risks such as prompt injection, data leakage and model access.
- Support incident response and remediation when application or cloud security issues arise.
Requirements
- 3+ years of hands-on experience in Application Security, Product Security or DevSecOps, with meaningful Application Security responsibilities.
- Experience working directly with software engineers on secure development and remediation.
- Good understanding of Web and API security, OWASP principles and common application security vulnerabilities.
- Experience integrating security into CI/CD or SDLC processes.
- Hands-on experience with AWS, GCP or Azure.
- Scripting or automation experience with Python, Bash, Go or similar.