Chamelio
Senior Application Security Engineer
Chamelio, an AI-powered legal intelligence platform, is hiring a Senior Application Security Engineer in Tel Aviv to be its core hands-on security authority: manual code audits (Python/TypeScript), penetration testing, SAST/DAST in CI/CD, hardening auth, and testing LLM/agentic workflows for prompt injection and data leakage. Requires 5+ years in appsec/pentesting and cloud security.
- Compensation
- Not disclosed
- Location
- Tel Aviv
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Full time
- Experience
- 5+ years
- Category
- Security
- Posted
Skills
Must have
- Passion to own and deliver security outcomes end to end
- Actively uses AI tools like Cursor or Claude Code
- 5+ years hands-on technical security experience in application security, penetration testing, and vulnerability research
- Proficiency in manual code auditing (Python, TypeScript) and web pentesting methodologies (OWASP Top 10, SANS)
- Strong command of cloud security (AWS/GCP/Azure), web application security, and secure architecture design
- Experience with security and compliance standards such as SOC 1, SOC 2, ISO 27001, or NIST
- Relevant technical security certifications (OSCP, OSEP, OSWE, GWAPT, or equivalent)
- Builder's mindset — comfortable establishing process and structure from scratch
- Ability to thrive in a fast-paced environment balancing technical execution with strategic and client conversations
- Strong communication skills
Nice to have
- Hands-on experience exploiting or securing LLM-powered applications, agentic systems, or AI infrastructure (OWASP Top 10 for LLMs)
- Background in legal, financial, or other high-stakes document-heavy domains
- Strong development capability in Python, Node.js/TypeScript, or Go for tooling and exploit POC creation
- Experience building a security function from scratch, e.g. as a founding or first security hire
- Familiarity with Kubernetes, infrastructure-as-code, and cloud-native architectures
Full description
About Chamelio
Chamelio is revolutionizing legal tech with an AI-powered Legal Intelligence Platform trusted by some of the world's fastest-growing companies including Wiz, Socure, and Monday
We integrate seamlessly with Salesforce and other systems to help in-house legal teams accelerate negotiations, reduce risk, and unlock institutional knowledge through automated workflows
We're solving complex problems at the intersection of AI and legal operations. Join us as we scale our impact globally
About the Role
- We're looking for a Senior Application Security Engineer to dive deep into our codebase, infrastructure, and AI systems at Chamelio
- We handle some of the most sensitive documents our customers have, and our buyers' security teams scrutinize us accordingly
- You'll be our core hands-on security authority: conducting technical vulnerability assessments, performing manual code reviews, leading internal penetration testing, and implementing robust security controls directly across our platform
- This is a deeply technical, hands-on role - if you thrive on auditing code, breaking application logic, finding zero-days, and writing security code to patch vulnerabilities, we want to hear from you
What You'll Do
- Perform hands-on application security reviews, manual code audits, and static/dynamic analysis (SAST/DAST) on our product codebase
- Conduct regular internal penetration testing, threat modeling, and security assessments across web application endpoints, cloud APIs, and microservices
- Build automated security testing tools and integrate vulnerability scanning directly into our CI/CD pipelines
- Identify, triage, and directly assist engineering teams in remediating complex application vulnerabilities and architectural flaws
- Set security standards and best practices across R&D and product as the internal authority on the subject
- Perform hands-on AI application security evaluations, testing LLMs and agentic workflows for prompt injection, data leakage, and access control bypasses
- Partner directly with developers to write secure libraries, harden authentication/authorization layers, and conduct incident response
- Manage third-party external penetration tests and vulnerability disclosure programs
What You'll Bring
- Passion to own and deliver - you take full responsibility for security outcomes and drive initiatives from idea to production
- Curiosity and adoption of AI tools - you actively use tools like Cursor or Claude Code and are excited about how AI is transforming both software development and the threat landscape