Director of Product Security at Axonius

The role

Axonius wants a Director of Product Security in Tel Aviv to protect its platform, its multi-tenant cloud setup and its newer AI features. You report to the Chief Trust and Security Officer and plan the product security roadmap together with the R&D and product leaders in Tel Aviv. The team's goals are a secure development process that is automated and can be measured, firm deadlines for fixing vulnerabilities, and keeping customers' trust.

What you will do

• Set and deliver the product security strategy and the secure development lifecycle, scoring progress against OWASP SAMM or NIST SSDF.
• Run automated pipeline checks (static analysis, dependency scanning, secrets, infrastructure as code, containers), adding manual code review where the risk justifies it.
• Manage vulnerabilities from start to finish: triage, confirming fixes, publishing PSIRT advisories and running the paid bug bounty.
• Set threat modeling practice and design guardrails for AWS workloads and for AI and LLM features.

What you need

• At least 12 years across software engineering and security, with 4 or more spent managing product or application security teams.
• Evidence of rolling out a measurable secure development process across more than 100 developers.
• The ability to review code yourself in Python, Go, JavaScript/TypeScript or Java, and to assess AWS and Kubernetes designs.
• Direct experience of vulnerability management for enterprise SaaS and of running a public or private bug bounty.

Nice to have

• Security governance for LLM applications and agent workflows, such as the OWASP Top 10 for LLMs and defenses against prompt injection.
• Adding AI-assisted automation to security triage or developer reviews.
• Earlier leadership at a fast-growing B2B SaaS or cybersecurity vendor whose customers examine its security closely.
• Public work such as conference talks, published CVEs or security research.
• Aligning product design with SOC 2, ISO 27001 or FedRAMP.
• A certification such as CSSLP, OSWE or OSCP.

About Axonius

Axonius makes a platform that pulls together data from all of an organization's IT systems, so security, IT and GRC teams can find exposures, misconfigurations and overspending and act on them.