2 months ago
Remote, PortugalMid Level
Responsibilities
- Collaborate with R&D teams to identify, prioritize, and drive security requirements and mitigation strategies throughout the development lifecycle.
- Conduct architecture, design, and threat-modeling security reviews for web, AWS cloud, and distributed systems.
- Create security architecture documents, design specifications, and technical guidelines for engineering teams.
- Lead incident response and cross-functional remediation during active product cybersecurity events.
- Support core development teams across Israel and Portugal in aligning security posture from planning through deployment.
Requirements
- At least 3 years of experience in application security or product security roles.
- At least 2 years of hands-on software development experience.
- Professional experience analyzing, reading, and evaluating codebase architecture in a product-centric technology stack.
- Hands-on AWS cloud experience and experience building application threat models.
- Active experience using AI/LLM-based tools such as Claude or Augment.
- Professional fluency in written and verbal English.
- Preferred: hands-on security architecture experience integrating and securing AI/LLM technologies in commercial B2B products.
- Preferred: experience designing security frameworks for modern cloud/SaaS stacks and legacy medical-device or hardware environments.
- Preferred: CISSP, OSCP, or CCSP certification.
- Preferred: published security research, CVE submissions, bug bounty participation, or security conference presentations.
- Preferred: bachelor’s or master’s degree in Computer Science, Engineering, or a related technical discipline.
Benefits
- 9-month temporary position.
- Hybrid work schedule.
- Competitive compensation and benefits, growth opportunities, and community-building opportunities.
About Axonius
Axonius builds an asset intelligence platform that unifies cyber asset inventory, exposure management, and automated response across devices, cloud infrastructure, SaaS, and identities for Security, IT, and GRC teams. Delivered as the Axonius Asset Cloud on a subscription basis, it aggregates data from existing tools to provide context, prioritize risks, and coordinate fixes. Founded in 2017 and headquartered in New York, the company is privately held.