Director of Product Security

Axonius · Tel Aviv, Israel

HíbridoNão informadoDiretor

Publicada há 6 horas

Sobre a vaga

<p id="p-rc_81e00015caf00f1e-76" data-path-to-node="1"><span data-path-to-node="1,0">Axonius is seeking a Director of Product Security in Tel Aviv to safeguard the Axonius platform, multi-tenant cloud architecture, and emerging AI-driven capabilities</span><span data-path-to-node="1,2">. Reporting directly to the Chief Trust and Security Officer, this leader will drive the end-to-end product security roadmap in close alignment with Tel Aviv R&amp;D and Product leadership</span><span data-path-to-node="1,4">. The team’s mission centers on establishing an automated, measurable secure SDLC, enforcing vulnerability remediation SLAs, and safeguarding customer trust</span><span data-path-to-node="1,6">.</span></p> <h2 data-path-to-node="2">Responsibilities</h2> <ul data-path-to-node="3"> <li> <p id="p-rc_81e00015caf00f1e-77" data-path-to-node="3,0,0"><span data-path-to-node="3,0,0,0">Define and execute the end-to-end product security strategy and secure SDLC, measuring maturity against OWASP SAMM or NIST SSDF benchmarks</span><span data-path-to-node="3,0,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-78" data-path-to-node="3,1,0"><span data-path-to-node="3,1,0,0">Direct automated CI/CD security tooling (SAST, SCA, secrets, IaC, container scanning) alongside risk-based manual secure code review gates</span><span data-path-to-node="3,1,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-79" data-path-to-node="3,2,0"><span data-path-to-node="3,2,0,0">Own the vulnerability management lifecycle, including triage, fix verification, PSIRT advisory issuance, and paid bug bounty operations</span><span data-path-to-node="3,2,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-80" data-path-to-node="3,3,0"><span data-path-to-node="3,3,0,0">Establish threat modeling and architectural guardrails for AWS cloud workloads and AI/LLM platform capabilities</span><span data-path-to-node="3,3,0,2">.</span></p> </li> </ul> <h2 data-path-to-node="4">Minimum Qualifications</h2> <ul data-path-to-node="5"> <li> <p id="p-rc_81e00015caf00f1e-81" data-path-to-node="5,0,0"><span data-path-to-node="5,0,0,0">12+ years of combined software engineering and security experience, including at least 4 years managing product or application security teams</span><span data-path-to-node="5,0,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-82" data-path-to-node="5,1,0"><span data-path-to-node="5,1,0,0">Documented track record implementing a measurable secure SDLC across engineering teams exceeding 100 developers</span><span data-path-to-node="5,1,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-83" data-path-to-node="5,2,0"><span data-path-to-node="5,2,0,0">Hands-on proficiency performing secure code reviews in modern languages (Python, Go, JavaScript/TypeScript, or Java) and assessing AWS/Kubernetes architectures</span><span data-path-to-node="5,2,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-84" data-path-to-node="5,3,0"><span data-path-to-node="5,3,0,0">End-to-end operational experience running enterprise SaaS vulnerability management and public or private bug bounty programs</span><span data-path-to-node="5,3,0,2">.</span></p> </li> </ul> <h2 data-path-to-node="6">Preferred Qualifications</h2> <ul data-path-to-node="7"> <li> <p id="p-rc_81e00015caf00f1e-85" data-path-to-node="7,0,0"><span data-path-to-node="7,0,0,0">Practical experience establishing security governance for LLM applications and agentic workflows (e.g., OWASP Top 10 for LLMs, prompt injection mitigation)</span><span data-path-to-node="7,0,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-86" data-path-to-node="7,1,0"><span data-path-to-node="7,1,0,0">Track record of building or embedding AI-assisted automation into security triage or developer review cycles</span><span data-path-to-node="7,1,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-87" data-path-to-node="7,2,0"><span data-path-to-node="7,2,0,0">Prior leadership experience inside high-growth B2B SaaS or cybersecurity vendors subject to rigorous customer security scrutiny</span><span data-path-to-node="7,2,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-88" data-path-to-node="7,3,0"><span data-path-to-node="7,3,0,0">Public industry contributions, including conference presentations, published CVEs, or security research advisories</span><span data-path-to-node="7,3,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-89" data-path-to-node="7,4,0"><span data-path-to-node="7,4,0,0">Experience aligning product architecture with SOC 2, ISO 27001, or FedRAMP compliance frameworks</span><span data-path-to-node="7,4,0,2">.</span></p> </li> <li> <p id="p-rc_81e00015caf00f1e-90" data-path-to-node="7,5,0"><span data-path-to-node="7,5,0,0">Industry certifications such as CSSLP, OSWE, or OSCP</span><span data-path-to-node="7,5,0,2">.</span></p> </li> </ul> <p>&nbsp;</p> <ul> <li>#LI-HYBRID</li> <li>#LI-AZ1&nbsp;</li> </ul><div class="content-conclusion"><p><strong>About Axonius:&nbsp;</strong></p> <p>Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence.</p> <p>Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world.</p> <p>Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about&nbsp;<a class="c-link" href="https://www.axonius.com/company/careers#benefits-and-perks" target="_blank" data-stringify-link="https://www.axonius.com/company/careers" data-sk="tooltip_parent"><strong>benefits at Axonius</strong></a>.</p> <p><span style="font-weight: 400;">At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives&nbsp;to apply. All qualified applicants will receive consideration for employment without regard to<strong data-stringify-type="bold">&nbsp;</strong>race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status.</span></p> <p><span style="font-weight: 400;"><strong style="color: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size: small; font-style: normal; letter-spacing: normal; text-align: start; word-spacing: 0px; white-space: normal; text-decoration: underline;"><strong>Axonius participates in E-Verify. To learn more, please review the </strong><strong><span><a href="https://www.e-verify.gov/sites/default/files/everify/posters/EVerifyParticipationPoster.pdf" target="_blank">E-Verify Participation Poster (PDF)</a></span></strong><strong> and the </strong><strong><span><a href="https://www.e-verify.gov/sites/default/files/everify/posters/IER_RightToWorkPoster%20Eng_Es.pdf" target="_blank">Right to Work Poster (PDF)</a></span></strong><strong>. </strong>By submitting your application to us, you acknowledge that your personal data will be processed in accordance&nbsp;with our <a href="https://www.axonius.com/global-job-candidate-privacy-notice" target="_blank">Global Job Candidate Privacy Notice.</a></strong></span></p></div>

Leu e ficou na dúvida? A nota responde.

Ver minha nota