Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 12 hours ago

Senior Application Security Engineer

Chamelio9 open roles

Where
Tel Aviv
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Application Security EngineerChamelio · Tel Aviv

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Chamelio's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.1% of postings close within 7 days. Measured by our own scanner across the market. Chamelio postings stay open a median of 21 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.1%7 days
  4. 21.1%14 days
  5. 35.8%30 days
  6. 59.0%60 days
This job: posted 12 hours ago

Chamelio median: 21 days open

The posting

About Chamelio

Chamelio is revolutionizing legal tech with an AI-powered Legal Intelligence Platform trusted by some of the world's fastest-growing companies including Wiz, Socure, and Monday

We integrate seamlessly with Salesforce and other systems to help in-house legal teams accelerate negotiations, reduce risk, and unlock institutional knowledge through automated workflows

We're solving complex problems at the intersection of AI and legal operations. Join us as we scale our impact globally

About the Role

- We're looking for a Senior Application Security Engineer to dive deep into our codebase, infrastructure, and AI systems at Chamelio

- We handle some of the most sensitive documents our customers have, and our buyers' security teams scrutinize us accordingly

- You'll be our core hands-on security authority: conducting technical vulnerability assessments, performing manual code reviews, leading internal penetration testing, and implementing robust security controls directly across our platform

- This is a deeply technical, hands-on role - if you thrive on auditing code, breaking application logic, finding zero-days, and writing security code to patch vulnerabilities, we want to hear from you

What You'll Do

- Perform hands-on application security reviews, manual code audits, and static/dynamic analysis (SAST/DAST) on our product codebase

- Conduct regular internal penetration testing, threat modeling, and security assessments across web application endpoints, cloud APIs, and microservices

- Build automated security testing tools and integrate vulnerability scanning directly into our CI/CD pipelines

- Identify, triage, and directly assist engineering teams in remediating complex application vulnerabilities and architectural flaws

- Set security standards and best practices across R&D and product as the internal authority on the subject

- Perform hands-on AI application security evaluations, testing LLMs and agentic workflows for prompt injection, data leakage, and access control bypasses

- Partner directly with developers to write secure libraries, harden authentication/authorization layers, and conduct incident response

- Manage third-party external penetration tests and vulnerability disclosure programs

What You'll Bring

- Passion to own and deliver - you take full responsibility for security outcomes and drive initiatives from idea to production

- Curiosity and adoption of AI tools - you actively use tools like Cursor or Claude Code and are excited about how AI is transforming both software development and the threat landscape

- 5+ years of hands-on technical security experience focusing on application security, penetration testing, and vulnerability research

- Demonstrated proficiency in manual code auditing (Python, TypeScript) and web penetration testing methodologies (OWASP Top 10, SANS)

- Strong command of cloud security (AWS/GCP/Azure), web application security, and secure architecture design

- Experience with security and compliance standards such as SOC 1, SOC 2, ISO 27001, or NIST frameworks

- Relevant technical security certifications (OSCP, OSEP, OSWE, GWAPT, or equivalent practical credentials)

- A builder's mindset - comfortable establishing process and structure where none exists

- Ability to thrive in a fast-paced environment, balancing deep technical execution with high-level strategic and client conversations

- Strong communication skills, effective in a fast-paced startup environment

Bonus Points

- Experience hands-on exploiting or securing LLM-powered applications, agentic systems, or AI infrastructure (OWASP Top 10 for LLMs)

- Background working with legal, financial, or other high-stakes documentheavy domains

- Strong development/coding capability in Python, Node.js/TypeScript, or Go for tooling and exploit POC creation

- Experience building a security function from scratch, especially as a founding or first security hire

- Familiarity with Kubernetes, infrastructure-as-code, and cloud-native architectures

Chamelio might be a good fit if you:

- Are relentlessly resourceful: You find creative solutions and don't let obstacles slow you down

- Have a strong sense of urgency: You have a bias towards doing things today, rather than tomorrow

- Thrive in startup environments: Fast-paced, high-impact work energizes you (preferred but not required)

- Are excited about the adventure: Building a company from the ground up excites you!

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Chamelio's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Chamelio's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Chamelio's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.