Want to know if this job is worth applying to?
תל־אביב–יפו, מחוז תל אביב, ישראל
Hybrid
Axonius is seeking a Director of Product Security in Tel Aviv to safeguard the Axonius platform, multi-tenant cloud architecture, and emerging AI-driven capabilities. Reporting directly to the Chief Trust and Security Officer, this leader will drive the end-to-end product security roadmap in close alignment with Tel Aviv R&D and Product leadership. The team’s mission centers on establishing an automated, measurable secure SDLC, enforcing vulnerability remediation SLAs, and safeguarding customer trust.
Define and execute the end-to-end product security strategy and secure SDLC, measuring maturity against OWASP SAMM or NIST SSDF benchmarks.
Direct automated CI/CD security tooling (SAST, SCA, secrets, IaC, container scanning) alongside risk-based manual secure code review gates.
Own the vulnerability management lifecycle, including triage, fix verification, PSIRT advisory issuance, and paid bug bounty operations.
Establish threat modeling and architectural guardrails for AWS cloud workloads and AI/LLM platform capabilities.
12+ years of combined software engineering and security experience, including at least 4 years managing product or application security teams.
Documented track record implementing a measurable secure SDLC across engineering teams exceeding 100 developers.
Hands-on proficiency performing secure code reviews in modern languages (Python, Go, JavaScript/TypeScript, or Java) and assessing AWS/Kubernetes architectures.
End-to-end operational experience running enterprise SaaS vulnerability management and public or private bug bounty programs.
Practical experience establishing security governance for LLM applications and agentic workflows (e.g., OWASP Top 10 for LLMs, prompt injection mitigation).
Track record of building or embedding AI-assisted automation into security triage or developer review cycles.
Prior leadership experience inside high-growth B2B SaaS or cybersecurity vendors subject to rigorous customer security scrutiny.
Public industry contributions, including conference presentations, published CVEs, or security research advisories.
Experience aligning product architecture with SOC 2, ISO 27001, or FedRAMP compliance frameworks.
Industry certifications such as CSSLP, OSWE, or OSCP.
About Axonius:
Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence.
Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world.
Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius.
At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard to race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status.
Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF). By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.
