Join HoneyBook as a Senior Application Security Engineer to enhance security in our AI-powered business management platform.
Posted by employer 16 hours ago
First seen on Joblaze 2 hours ago
Last verified on the company career page 2 hours ago
Skills & Technologies
What you'll build
- Shape and own Secure Software Development Lifecycle
- Manage security tooling
- Lead assessment of application and API security
- Manage HoneyBook’s bug bounty program
- Promote a strong security culture
Must have
- 3+ years of experience in Application Security
- Proven experience with modern web application stacks
- Strong understanding of application security principles
- Experience with SAST/DAST/IAST tools
- Excellent communication skills
Nice to have
- Certifications like OSCP, GWAPT, CISSP, or CSSLP
AI in the day-to-day
HoneyBook’s AI-powered tools help businesses attract leads, connect with clients, book projects, and manage payments more efficiently.
Requirements
- Experience
- 3+ years
Not disclosed in this posting: compensation, work arrangement, visa sponsorship.
Benefits
Joblaze summary
The Senior Application Security Engineer at HoneyBook plays a crucial role in enhancing the security of the software development lifecycle by collaborating with engineering teams to implement security measures and manage vulnerabilities. This position requires expertise in modern web application stacks, cloud-native architectures, and security tools like SAST and DAST, along with strong communication skills to effectively convey security concepts to developers. Ideal candidates will have over three years of relevant experience and a proactive approach to fostering a security-first culture within the organization.
Joblaze insights
- Listed today — first seen on Joblaze November 6, 2026. Last confirmed on HoneyBook's careers page November 6, 2026.
- SAST appears in 3.1% of 32 comparable senior security roles in Israel.
Quick facts
- How much experience is required?
- At least 3 years of relevant experience for this Application Security Engineer role.
- What's the tech stack?
- Joblaze extracted these technologies from the posting: APIs, Application Security, DAST, IAST, SAST, Secure Software Development.
- What seniority level is this role?
- HoneyBook targets senior candidates for this position.
- Is this full-time or contract?
- Full-time for this Application Security Engineer role at HoneyBook.
From the original posting
We’re looking for a Senior Application Security Engineer to join our Security Engineering team. This role is ideal for a hands-on security professional who is passionate about working closely with engineering teams to build agentic workflow that secure SDLC, patch new vulnerabilities and creates dynamic guardrails to the agentic engineering force across the organization
You’ll be responsible for shaping and owning our Secure Software Development Lifecycle (SSDLC), managing security tooling, and leading the assessment of application and API security across HoneyBook’s products and services.
Here are a few of the things you will do:
Collaborate directly with engineering teams to define remediation strategies, orchestrate agentic workflows that apply security fixes across the application stack.
Design, implement, and drive SSDLC guardrails across the company - from security design reviews and threat modeling to proactive triaging in production.
Orchestrate agentic threat modeling, architecture reviews, and security assessments of cloud-based applications and services, including those leveraging emerging technologies.
Manage HoneyBook’s bug bounty program, validating reports and coordinating response and resolution.
Own and operate our suite of AppSec tools including SAST, ASPM, and other security scanners—triaging findings, prioritizing issues, and guiding engineering toward resolution.
Act as the point of contact for findings from penetration tests, automated scanners, and external assessments, helping manage triage and ensure timely fixes.
Continuously research and stay current with application security trends, frameworks, vulnerabilities, and best practices.
Promote a strong security culture across HoneyBook by educating and enabling engineers, architects, and DevOps teams to build secure software from the ground up.
Here's what we're looking for:
3+ years of experience in Application Security, Product Security, or Secure Software Development.
Proven experience working with modern web application stacks, cloud-native architectures, APIs, and CI/CD pipelines.
Strong understanding of application security principles, common vulnerabilities (OWASP Top 10), and secure coding best practices.
Experience with SAST/DAST/IAST tools
Experience managing bug bounty programs and third-party testing engagements.
Excellent communication skills - able to translate security concepts into developer-friendly language and work cross-functionally across teams.
Ability to balance pragmatic risk mitigation with product velocity, business needs, and user experience.
A growth mindset and a desire to mentor others and continuously improve HoneyBook’s security posture.
Certifications like OSCP, GWAPT, CISSP, or CSSLP are a plus but not required.
Access our Privacy Policy .
Standard company text repeated across HoneyBook's postings is omitted here.