Via is using technology to transform transportation around the world. From changing a single person’s daily commute to reducing humanity’s collective environmental footprint — we’ve got huge goals.As an Application Security Engineer at Via, you will be a key member of the team, responsible for ensuring the security of Via's applications throughout the software development lifecycle. You will work closely with development, operations, and product teams to identify and mitigate vulnerabilities, promote secure coding practices, and build a robust application security program.What You’ll Do:<ul><li>Perform security assessments, including penetration testing, vulnerability scanning, and code reviews, to identify security weaknesses in applications.</li><li>Collaborate with development teams to remediate identified vulnerabilities and implement secure coding practices.</li><li>Develop and deliver security training to development teams on secure coding techniques and common vulnerabilities.</li><li>Define and implement application security testing strategies, including static analysis, dynamic analysis, and software composition analysis.</li><li>Integrate security testing tools and processes into the CI/CD pipeline.</li><li>Contribute to the development and maintenance of application security policies, standards, and procedures.</li><li>Research and evaluate new application security tools and technologies.</li><li>Monitor application security metrics and provide regular reports on the security posture of applications.</li><li>Participate in incident response activities related to application security.</li><li>Champion a security-first culture within the engineering organization.</li></ul>Who You Are:<ul><li>A Bachelor's degree in Computer Science or a related field is a plus.</li><li>Minimum of 2 years of experience as an Application Security Engineer, Penetration Tester or in a similar role.</li><li>Strong understanding of application security concepts, including OWASP Top 10, CWE Top 25, and SANS Critical Security Controls.</li><li>Experience with various application security testing tools and techniques (e.g., SAST, DAST, SCA).</li><li>Proficiency in at least one scripting language (e.g., Python, JavaScript, Ruby).</li><li>Experience with secure coding practices and vulnerability remediation.</li><li>Familiarity with CI/CD pipelines and DevOps practices.</li><li>Excellent communication and collaboration skills.</li><li>Ability to work independently and as part of a team.</li><li>Experience with cloud platforms (AWS is an advantage).</li></ul>Compensation and Benefits:<ul><li>Our product impacts millions of users around the world  providing alternative transport solutions that are more: efficient and accessible, changing cities to make them greener.</li><li>Competitive compensation package which includes base salary and stock options</li><li>Health insurance with a discount for family members</li><li>Hybrid work and a lovely office situated in the heart of TLV, in Midtown, close to the light rail and train station</li><li>Career development and growth opportunities</li><li>Other perks: Freefit and other sports lessons, 10bis/Cibus - you choose!, happy hours, team events, communities and many more benefits</li></ul> We’re Via, and we build technology that changes the way the world moves. We’re driven by a simple mission: to create modern and efficient public transportation systems that provide far greater access to jobs, healthcare, and education. With our best in class suite of products, we make transit thrive. Our teams of world-class engineers, data-scientists, product managers, operations specialists, marketers, transit experts and more bring cutting-edge AI-powered software and innovative technology-enabled operations to our partners across the globe. Founded in 2012, Via builds solutions to digitize, automate, and enable data-driven decision making for entire transportation networks; fixed-route buses, microtransit, paratransit, school buses, autonomous vehicles, and more.  If you’re excited to be at the forefront of modernizing the future of transportation, are up for solving tough problems, and willing to become/already are a transit nerd, we are the place for you. Even if your past experience doesn’t align perfectly with every qualification in the job description for this role, we encourage you to apply. You may be just the right candidate for this or other opportunities. Ready to join the ride?Via is an equal opportunity employer.

Via builds innovative software to enable our customers &mdash; cities, transit agencies, transport operators, school districts, universities, and corporations &mdash; to transform their legacy transportation systems into advanced digital networks. As pioneers of the TransitTech category, Via&rsquo;s mission is to expand access to efficient, affordable, and sustainable transportation. Via&rsquo;s software enables organizations to digitize their existing transportation networks and launch new and innovative services, simultaneously lowering operating costs and increasing quality of service. Our software is used in over 500 communities in more than 35 countries around the world.

Application Security Engineer

Via is using technology to transform transportation around the world. From changing a single person’s daily commute to reducing humanity’s collective environmental footprint — we’ve got huge goals.As an&nbsp;Application Security Engineer at Via, you will be a key member of the team, responsible for ensuring the security of Via's applications throughout the software development lifecycle. You will work closely with development, operations, and product teams to identify and mitigate vulnerabilities, promote secure coding practices, and build a robust application security program.What You’ll Do:<ul><li>Perform security assessments, including penetration testing, vulnerability scanning, and code reviews, to identify security weaknesses in applications.</li><li>Collaborate with development teams to remediate identified vulnerabilities and implement secure coding practices.</li><li>Develop and deliver security training to development teams on secure coding techniques and common vulnerabilities.</li><li>Define and implement application security testing strategies, including static analysis, dynamic analysis, and software composition analysis.</li><li>Integrate security testing tools and processes into the CI/CD pipeline.</li><li>Contribute to the development and maintenance of application security policies, standards, and procedures.</li><li>Research and evaluate new application security tools and technologies.</li><li>Monitor application security metrics and provide regular reports on the security posture of applications.</li><li>Participate in incident response activities related to application security.</li><li>Champion a security-first culture within the engineering organization.</li></ul>Who You Are:<ul><li>A Bachelor's degree in Computer Science or a related field is a plus.</li><li>Minimum of 2 years of experience as an Application Security Engineer, Penetration Tester or in a similar role.</li><li>Strong understanding of application security concepts, including OWASP Top 10, CWE Top 25, and SANS Critical Security Controls.</li><li>Experience with various application security testing tools and techniques (e.g., SAST, DAST, SCA).</li><li>Proficiency in at least one scripting language (e.g., Python, JavaScript, Ruby).</li><li>Experience with secure coding practices and vulnerability remediation.</li><li>Familiarity with CI/CD pipelines and DevOps practices.</li><li>Excellent communication and collaboration skills.</li><li>Ability to work independently and as part of a team.</li><li>Experience with cloud platforms (AWS is an advantage).</li></ul>Compensation and Benefits:<ul><li>Our product impacts millions of users around the world&nbsp; providing alternative transport solutions that are more: efficient and accessible, changing cities to make them greener.</li><li>Competitive compensation package which includes base salary and stock options</li><li>Health insurance with a discount for family members</li><li>Hybrid work and a lovely office situated in the heart of TLV, in Midtown, close to the light rail and train station</li><li>Career development and growth opportunities</li><li>Other perks: Freefit and other sports lessons, 10bis/Cibus - you choose!, happy hours, team events, communities and many more benefits</li></ul>&nbsp;We’re Via, and we build technology that changes the way the world moves. We’re driven by a simple mission: to create modern and efficient public transportation systems that provide far greater access to jobs, healthcare, and education. With our best in class suite of products, we make transit thrive. Our teams of world-class engineers, data-scientists, product managers, operations specialists, marketers, transit experts and more bring cutting-edge AI-powered software and innovative technology-enabled operations to our partners across the globe. Founded in 2012, Via builds solutions to digitize, automate, and enable data-driven decision making for entire transportation networks; fixed-route buses, microtransit, paratransit, school buses, autonomous vehicles, and more.&nbsp; If you’re excited to be at the forefront of modernizing the future of transportation, are up for solving tough problems, and willing to become/already are a transit nerd, we are the place for you. Even if your past experience doesn’t align perfectly with every qualification in the job description for this role, we encourage you to apply. You may be just the right candidate for this or other opportunities.&nbsp;Ready to join the ride?Via is an equal opportunity employer.

Application Security Engineer

About the Job

About the Company

Via Transporation

Similar Jobs

Product Security Architect - Digital & Enterprise Applications

Product Security Architect - Digital & Enterprise Applications

Senior Security Engineer

Senior Security Engineer

Information Security Engineer

Information Security Engineer

Cloud Security Engineer

Cloud Security Engineer

IT Software Engineer

IT Software Engineer

Security Engineer, Cloud Infrastructure

Security Engineer, Cloud Infrastructure

Information Security Engineer

Information Security Engineer

Embedded System Security Engineer – Linux/C++ (m/f/d)

Embedded System Security Engineer – Linux/C++ (m/f/d)

Cybersecurity Analyst (Product Security Engineer)

Cybersecurity Analyst (Product Security Engineer)

Engineer, Security Engineering

Engineer, Security Engineering