This is a 9-month temporary position

As a Product Security Architect, you will join a highly technical, fast-moving Product Security team to advance and secure Axonius's platform and its modern AI-driven capabilities. Operating in an environment with deep R&D collaboration and a hybrid schedule, you will own the development lifecycle's security strategy, ensuring modern cloud and distributed systems are engineered safely by design. This role directly supports core development teams across Israel and Portugal, ensuring robust posture alignment from initial planning through deployment.

Responsibilities

• Collaborate with R&D teams to identify, prioritize, and drive security requirements and mitigation strategies throughout the development lifecycle.
• Conduct architecture, design, and threat modeling security reviews for web, cloud (AWS), and distributed systems.
• Produce explicit, actionable security architecture documents, design specifications, and technical guidelines for engineering.
• Lead incident response efforts during active product cyber security events, driving cross-functional remediation across engineering teams.

Minimum Qualifications

• 3+ years of experience in application security or product security roles.
• 2+ years of hands-on software development experience.
• Professional experience analyzing, reading, and evaluating codebase architecture within a product-centric tech stack.
• Hands-on experience working directly in AWS cloud environments and building application threat models.
• Active experience utilizing AI/LLM-based tools (e.g., Claude, Augment) to optimize development workflows, research, or productivity.
• Professional fluency in both written and verbal communication in English.

Preferred Qualifications

• Hands-on security architecture experience integrating and securing AI/LLM technologies directly within modern commercial B2B products.
• Professional experience designing security frameworks for both modern cloud/SaaS stacks and legacy medical device/hardware environments.
• Industry-recognized security certifications such as CISSP, OSCP, or CCSP.
• Proven track record of published security research, CVE submissions, bug bounty participation, or security conference presentations.