Director of Product Security

Axonius is seeking a Director of Product Security in Tel Aviv to safeguard the Axonius platform, multi-tenant cloud architecture, and emerging AI-driven capabilities. Reporting directly to the Chief Trust and Security Officer, this leader will drive the end-to-end product security roadmap in close alignment with Tel Aviv R&D and Product leadership. The team’s mission centers on establishing an automated, measurable secure SDLC, enforcing vulnerability remediation SLAs, and safeguarding customer trust.

Responsibilities

Define and execute the end-to-end product security strategy and secure SDLC, measuring maturity against OWASP SAMM or NIST SSDF benchmarks.

Direct automated CI/CD security tooling (SAST, SCA, secrets, IaC, container scanning) alongside risk-based manual secure code review gates.

Own the vulnerability management lifecycle, including triage, fix verification, PSIRT advisory issuance, and paid bug bounty operations.

Establish threat modeling and architectural guardrails for AWS cloud workloads and AI/LLM platform capabilities.

Minimum Qualifications

12+ years of combined software engineering and security experience, including at least 4 years managing product or application security teams.

Documented track record implementing a measurable secure SDLC across engineering teams exceeding 100 developers.

Hands-on proficiency performing secure code reviews in modern languages (Python, Go, JavaScript/TypeScript, or Java) and assessing AWS/Kubernetes architectures.

End-to-end operational experience running enterprise SaaS vulnerability management and public or private bug bounty programs.

Preferred Qualifications

Practical experience establishing security governance for LLM applications and agentic workflows (e.g., OWASP Top 10 for LLMs, prompt injection mitigation).

Track record of building or embedding AI-assisted automation into security triage or developer review cycles.

Prior leadership experience inside high-growth B2B SaaS or cybersecurity vendors subject to rigorous customer security scrutiny.

Public industry contributions, including conference presentations, published CVEs, or security research advisories.

Experience aligning product architecture with SOC 2, ISO 27001, or FedRAMP compliance frameworks.

Industry certifications such as CSSLP, OSWE, or OSCP.

#LI-HYBRID

#LI-AZ1