Title: Application Security LeaderLocation: Ra'anana #LI-Hybrid 4 days a week in officeAbout The CompanyDriveNets is a leader in large-scale networking solutions for AI infrastructure and service providers. The company’s disaggregated networking architecture transforms the economics of large-scale infrastructures while maximizing performance, utilization, and operational efficiency. Its high-performance AI fabric maximizes GPU utilization and accelerates deployments by optimizing the AI stack end-to-end, resulting in higher tokens-per-second and lower cost-per-token. DriveNets’ solutions power production networks for global tier-1 operators like AT&T and Comcast, and scale multi-vendor AI infrastructures at foundation model labs, NeoClouds, and enterprises. About the Role We are looking for a talented Application Security Manager to join our CISO team and lead the application security practice at DriveNets. You will be the primary owner of AppSec across our product portfolio, working closely with Product, R&D, and DevOps teams to embed security into the software development lifecycle and collaboratively build a strong, scalable security posture. This is a foundational role. DriveNets delivers ISP-grade networking software to some of the world’s largest telecommunications providers. The security of our products is directly tied to the trust our customers place in us and to our ability to meet contractual, compliance, and audit obligations including ISO 27001 and SOC 2, DRA. What You’ll Do Product & R&D Collaboration Work closely with Product, R&D, and DevOps teams to define high-level and detailed security requirements for various features and product releases. Partner with R&D teams to review code for security vulnerabilities, both manually and through automated and AI tooling at machine speed. Guide R&D teams on secure coding best practices and how to remediate findings effectively. Drive and track the progress of security bug resolution with R&D and DevOps teams, ensuring issues are prioritized and closed on time. Security Champions. Establish, guide, and lead a Security Champions program across all Business Units embedding security ownership into R&D, Product, and DevOps teams to continuously elevate the organization's overall security posture. Metrics, Define and provide product security metrics that deliver clear visibility to all BUs and leadership, enabling the right business decisions while effectively managing product security risks at the executive level. Application Security Operations Build, maintain, and continuously improve AppSec processes and tools across the SSDLC. Lead as SME representing the CISO as focal point on the AI factory program and forum. Perform periodic application-level penetration tests on major features and product versions. Evaluate the security posture of third-party tools, libraries, and vendors from an application security perspective. Integrate and operate SAST, DAST, and SCA tooling into CI/CD pipelines; manage findings triage and remediation workflows. Assess container and Kubernetes security posture; enforce hardening standards across the deployment stack.  Leadership & Team Development Lead the AppSec function, building and expanding the team over time to match the company’s growth. Mentor engineers and security team members on application security concepts and practices. Act as the AppSec subject matter expert across the organization, including for external-facing engagements.  Compliance & Audit Work on RFP and audit responses as needed, representing the AppSec program to customers and auditors. Maintain evidence and documentation for ISO 27001, SOC 2 & DRA controls related to secure development and vulnerability management. Support supply chain security reviews for ISP customers (e.g., AT&T) with application security artifacts.