Senior Security Engineer at Nexxen

Tel Aviv, Tel-Aviv District, Israel -

Full Time

Start Date

Immediate

Expiry Date

09 Feb, 26

Salary

0.0

Posted On

11 Nov, 25

Experience

5 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Application Security, Cyber Security, Incident Response, Threat Hunting, Vulnerability Management, Secure Coding Practices, AWS WAF, CloudFront, API Security, Compliance, SAST, DAST, SCA, Automation, Communication, Collaboration

Industry

Advertising Services

Description

Who is Nexxen? Flexible advertising, unified by data. Nexxen empowers advertisers, agencies, publishers and broadcasters around the world to utilize data and advanced TV in the ways that are most meaningful to them. Our flexible and unified technology stack comprises a demand-side platform (“DSP”) and supply-side platform (“SSP”), with the Nexxen Data Platform at its core. Why join the Nexxen team? With a global footprint, you can be part of a team that is transforming advertising through our creative, flexible and unified solutions. Employees hustle, commit and dedicate themselves to pillars that make up the Nexxen Way – the 3Cs - Customer Centric, Curious Mindset, Collaborative with No Ego. Important Notice from Nexxen: Your Safety Matters At Nexxen, we care about the well-being of our current and future employees. We are aware of the growing number of online scams and fraudulent job postings, and we urge all job seekers to remain vigilant. Please be advised that Nexxen will never request payment (whether in cash, cryptocurrency, or any other form) as a condition of employment, offer positions that require you to invest in vague or dubious financial schemes, or promote roles that resemble get-rich-quick opportunities. If you receive a suspicious message claiming to be from Nexxen or encounter a questionable job posting associated with our name, please contact us at infosec@nexxen.com to verify its legitimacy. Your trust is important to us. Stay safe and informed. Nexxen Fraud Alert and Notice: Protect Yourself from Impersonation and Fraudulent Activity Who is Nexxen? One platform. Endless opportunities. In an ecosystem where everyone’s trying to get closer – buyers to sellers, platforms to clients, brands to consumers – Nexxen bridges new opportunities in ways that others cannot. Data, service, and planning capabilities are our superpowers, enabling our clients to better reach and understand audiences across screens. Nexxen brings new and distinct opportunities to our partners, giving our employees the chance to expand and grow their skills. Why join the Nexxen team? With a global footprint, you can be part of a team that is transforming advertising through our creative, flexible and unified solutions. Employees hustle, commit and dedicate themselves to pillars that make up the Nexxen Way – the 3Cs - Customer Centric, Curious Mindset, Collaborative with No Ego. We are looking for an experienced Engineer for Security Operations to manage the cyber security of products, platforms, systems, and data. This role involves leading incident response, threat hunting, and vulnerability management, while overseeing the deployment and maintenance of advanced security technologies. You will collaborate with Development and DevOps teams to ensure secure coding practices. What will you do? Lead the application security roadmap and embed security in SDLC/CI-CD and the software supply chain. Run and tune SAST/DAST/SCA with policy-as-code; drive secure coding patterns and SLA-based vuln remediation. Strengthen web/API security: design and operate AWS WAF/CloudFront; enforce controls on API Gateway. Feed AppSec signals to SIEM/SOAR; define app-layer detections and partner with IR for web/API threats. Support compliance (SOC 2, ISO 27001, PCI) with control mapping and evidence. What will I bring? 5–8+ years in application security delivering secure SDLC and K8s security at scale with strong developer enablement. Deep experience with WAF (AWS and Cloudflare WAF) and edge protections. Hands-on with SAST/DAST/SCA at scale, CI/CD integration, and metrics-driven remediation. Familiarity with OWASP Top 10 and common web/API attack patterns; ability to translate into actionable controls and tests. Familiar with AWS security services: Shield, Guard Duty, Inspector, KMS, Secrets Manager, IAM. Automation-first mindset with clear communication and stakeholder management. Nice-to-have certs: CISSP/ISSEP, CISM, GCSA/GWAPT, SSCP, GCIH. Soft skills Passionate about developer enablement, coaching, and advocacy. Pragmatic, automation-first, and sharply outcome-oriented. Exceptional cross-functional communication and collaboration At Nexxen, we value our differences, varied experiences, and collective contribution. We know that not everyone takes the same career path, so if you don’t match this job description perfectly, don’t worry! We would rather see your application than risk missing out on your potential to make an impact. What if I have any questions before I apply? All applications need to be submitted online, however, to discuss any adjustments you may require ahead of submitting your application, please email NDsender@gmail.com #LI-ND1 #LI-HYBRID For information about how we handle your personal information please view our Applicant and Candidate Privacy Notice

Responsibilities

Lead the application security roadmap and embed security in SDLC/CI-CD and the software supply chain. Collaborate with Development and DevOps teams to ensure secure coding practices.