Director of Product Security
AxoniusTel Aviv и ещё 1 городГибридот 12 лет
AIKubernetesLLMAWSDevSecOpsSDLCVulnerability ManagementSAST/DASTSCAProduct Security
Описание
This role is for a Director of Product Security in Tel Aviv to safeguard the Axonius platform, multi-tenant cloud architecture, and emerging AI-driven capabilities. This leader will drive the end-to-end product security roadmap in close alignment with Tel Aviv R&D and Product leadership.
Responsibilities
- Define and execute the end-to-end product security strategy and secure SDLC, measuring maturity against OWASP SAMM or NIST SSDF benchmarks
- Direct automated CI/CD security tooling (SAST, SCA, secrets, IaC, container scanning) alongside risk-based manual secure code review gates
- Own the vulnerability management lifecycle, including triage, fix verification, PSIRT advisory issuance, and paid bug bounty operations
- Establish threat modeling and architectural guardrails for AWS cloud workloads and AI/LLM platform capabilities
Requirements
- 12+ years of combined software engineering and security experience
- At least 4 years managing product or application security teams
- Documented track record implementing a measurable secure SDLC across engineering teams exceeding 100 developers
- Hands-on proficiency performing secure code reviews in modern languages (Python, Go, JavaScript/TypeScript, or Java) and assessing AWS/Kubernetes architectures
- End-to-end operational experience running enterprise SaaS vulnerability management and public or private bug bounty programs
Nice to have
- Practical experience establishing security governance for LLM applications and agentic workflows (e.g., OWASP Top 10 for LLMs, prompt injection mitigation)
- Track record of building or embedding AI-assisted automation into security triage or developer review cycles
- Prior leadership experience inside high-growth B2B SaaS or cybersecurity vendors subject to rigorous customer security scrutiny
- Public industry contributions, including conference presentations, published CVEs, or security research advisories
- Experience aligning product architecture with SOC 2, ISO 27001, or FedRAMP compliance frameworks
- Industry certifications such as CSSLP, OSWE, or OSCP
We offer
- Competitive compensation and benefits
- Growth opportunities
- Community-building
- Axonius supports a diverse and inclusive workplace and believes in equal employment opportunity