Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 6 hours ago

Application Security Engineer

HoneyBook5 open roles

Where
Tel Aviv
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowApplication Security EngineerHoneyBook · Tel Aviv

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on HoneyBook's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. HoneyBook postings stay open a median of 56 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: posted 6 hours ago

HoneyBook median: 56 days open

The posting

HoneyBook is the leading AI-powered business management platform for service-based business owners. Designed to enhance - not replace - independent professionals. HoneyBook’s AI-powered tools help businesses attract leads, connect with clients, book projects, and manage payments more efficiently. With AI seamlessly integrated into every workflow, entrepreneurs can focus on their craft while scaling their businesses with confidence. Since its founding in 2013, HoneyBook has powered over 25 million client relationships and processed more than $12 billion in transactions, helping independent businesses grow faster and smarter.

Our culture is built on five core values that inform everything we do. We encourage collaboration, feedback, ownership, and maintain a growth mindset. We know experience comes in many forms - some visible on your resume, others not. No one candidate will be a 100% perfect match to our description, so if you thrive in a fast-paced, intellectually curious environment and have relevant experience, we encourage you to apply.

We’re looking for a Senior Application Security Engineer to join our Security Engineering team. This role is ideal for a hands-on security professional who is passionate about working closely with engineering teams to build agentic workflow that secure SDLC, patch new vulnerabilities and creates dynamic guardrails to the agentic engineering force across the organization

You’ll be responsible for shaping and owning our Secure Software Development Lifecycle (SSDLC), managing security tooling, and leading the assessment of application and API security across HoneyBook’s products and services.

Here are a few of the things you will do:

- Collaborate directly with engineering teams to define remediation strategies, orchestrate agentic workflows that apply security fixes across the application stack.

- Design, implement, and drive SSDLC guardrails across the company - from security design reviews and threat modeling to proactive triaging in production.

- Orchestrate agentic threat modeling, architecture reviews, and security assessments of cloud-based applications and services, including those leveraging emerging technologies.

- Manage HoneyBook’s bug bounty program, validating reports and coordinating response and resolution.

- Own and operate our suite of AppSec tools including SAST, ASPM, and other security scanners—triaging findings, prioritizing issues, and guiding engineering toward resolution.

- Act as the point of contact for findings from penetration tests, automated scanners, and external assessments, helping manage triage and ensure timely fixes.

- Continuously research and stay current with application security trends, frameworks, vulnerabilities, and best practices.

- Promote a strong security culture across HoneyBook by educating and enabling engineers, architects, and DevOps teams to build secure software from the ground up.

Here's what we're looking for:

- 3+ years of experience in Application Security, Product Security, or Secure Software Development.

- Proven experience working with modern web application stacks, cloud-native architectures, APIs, and CI/CD pipelines.

- Strong understanding of application security principles, common vulnerabilities (OWASP Top 10), and secure coding best practices.

- Experience with SAST/DAST/IAST tools

- Experience managing bug bounty programs and third-party testing engagements.

- Excellent communication skills - able to translate security concepts into developer-friendly language and work cross-functionally across teams.

- Ability to balance pragmatic risk mitigation with product velocity, business needs, and user experience.

- A growth mindset and a desire to mentor others and continuously improve HoneyBook’s security posture.

Certifications like OSCP, GWAPT, CISSP, or CSSLP are a plus but not required.

The good stuff:

Mission-driven: You'll be joining more than just another startup. Our members’ success is at the heart of everything we do.

Impact: We move quickly and encourage every employee to push the envelope. Our best ideas come from out-of-the-box thinking and innovation; be ready to fail fast and often!

Compensation: We offer a competitive salary and meaningful equity grants.

Benefits & perks: From wellness programs to exceptional family leave policies, the health and happiness of our employees are foremost.

Our core values:

People come first: We prioritize people as we explore opportunities and work through challenges. Raise the bar: We push for greatness—for ourselves, each other, and our members. Own it: Trust and ownership let us make decisions with confidence. We love what we do: We bring passion to our work and love what we create for our members. Keep it real: Authenticity, respect, and transparency are at our core.

The opportunity at HoneyBook is huge. Our primary customers today are creative businesses that generate $150M in revenue per year in the US. Founded in 2013, HoneyBook is based in San Francisco and Tel Aviv, has raised $498M, and is funded by Tiger Global Management, Norwest Venture Partners, Aleph, Hillsven Capital, OurCrowd, Durable Capital Partners LP, Vintage Investment Partners, Battery Ventures, Citi Ventures, Zeev Ventures, and 01 Advisors.

Follow us on LinkedIn https://www.linkedin.com/company/honeybook/, BuiltIn https://builtin.com/company/honeybook and Instagram https://www.instagram.com/wearehoneybook/ to catch the latest stories about HoneyBook.

Applicant Information When you apply for a job or an independent contractor/agent position with HoneyBook, we collect the information that you provide in connection with your application. This includes name, contact information, professional credentials and skills, educational and work history, and other information that may be included in a resume or provided during interviews (which may be recorded). This may also include demographic or diversity information that you voluntarily provide. We may also conduct background checks and receive related information.

We use applicants’ information to facilitate our recruitment activities and process applications, including evaluating candidates and monitoring recruitment statistics. We use successful applicants’ information to administer the employment or independent contractor relationship. We may also use and disclose applicants’ information (a) to improve our Services, (b) as otherwise necessary to comply with relevant laws, (c) to respond to subpoenas or warrants served on HoneyBook, and (d) to protect and defend the rights or property of HoneyBook or others.

Access our Privacy Policy https://www.honeybook.com/terms/privacy.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against HoneyBook's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on HoneyBook's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    HoneyBook's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.