At a Glance
About This Role
This is a 9-month temporary position
As a Product Security Architect, you will join a highly technical, fast-moving Product Security team to advance and secure Axonius's platform and its modern AI-driven capabilities. Operating in an environment with deep R&D collaboration and a hybrid schedule, you will own the development lifecycle's security strategy, ensuring modern cloud and distributed systems are engineered safely by design. This role directly supports core development teams across Israel and Portugal, ensuring robust posture alignment from initial planning through deployment.
Responsibilities
- Collaborate with R&D teams to identify, prioritize, and drive security requirements and mitigation strategies throughout the development lifecycle.
- Conduct architecture, design, and threat modeling security reviews for web, cloud (AWS), and distributed systems.
- Produce explicit, actionable security architecture documents, design specifications, and technical guidelines for engineering.
- Lead incident response efforts during active product cyber security events, driving cross-functional remediation across engineering teams.
Minimum Qualifications
- 3+ years of experience in application security or product security roles.
- 2+ years of hands-on software development experience.
- Professional experience analyzing, reading, and evaluating codebase architecture within a product-centric tech stack.
- Hands-on experience working directly in AWS cloud environments and building application threat models.
- Active experience utilizing AI/LLM-based tools (e.g., Claude, Augment) to optimize development workflows, research, or productivity.
- Professional fluency in both written and verbal communication in English.
Preferred Qualifications
- Hands-on security architecture experience integrating and securing AI/LLM technologies directly within modern commercial B2B products.
- Professional experience designing security frameworks for both modern cloud/SaaS stacks and legacy medical device/hardware environments.
- Industry-recognized security certifications such as CISSP, OSCP, or CCSP.
- Proven track record of published security research, CVE submissions, bug bounty participation, or security conference presentations.
- Bachelor’s or Master’s degree in Computer Science, Engineering, or a related technical discipline.
#LI-REMOTE, #LI-ZR1
About Axonius:
Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence.
Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world.
Axonius makes it a priority to invest in our people with competitive compensation and benefits, growth opportunities, community-building, and so much more. Learn more about benefits at Axonius.
At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives to apply. All qualified applicants will receive consideration for employment without regard torace, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status.
Axonius participates in E-Verify. To learn more, please review the E-Verify Participation Poster (PDF) and the Right to Work Poster (PDF). By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our Global Job Candidate Privacy Notice.
Source: Axonius careers · View original posting
About Axonius
Security at Axonius
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Section 1 — Philosophy and priorities. Product security is integrated into the Secure Development Lifecycle — "Axonius incorporates security reviews into our Secure Development Lifecycle (SDL) process for the Axonius Asset Cloud, giving the Axonius security team the ability to offer feedback and guidance." (Axonius Security Program, updated) Automated detection and external validation are priorities — "It also includes automated scanning to identify security weaknesses." (Axonius Security Program, updated) Independent testing supplements internal security oversight — "Axonius regularly commissions third-party experts to perform penetration testing to identify additional application vulnerabilities and help maintain our product’s security posture." (Axonius Security Program, updated) Risk philosophy: proactive identification, remediation, and maintenance of product security posture are publicly stated; detailed risk-acceptance criteria are not publicly available. Stated pain points or goals: identify security weaknesses, find application vulnerabilities, and maintain the product security posture. (Axonius Security Program, updated)”
Security Team
Section 2 — People and structure. Org model: A dedicated security function provides internal oversight and guidance within the SDL; whether AppSec is centralized or embedded is not publicly available. no verified AppSec leader with a publicly confirmed title and LinkedIn URL was identified. Team size estimate: Public results indicate at least three Application Security/Product Security openings across the United Kingdom, Portugal, and Tel Aviv, plus a Product Security Architect temporary role; this is an openings-based lower bound, not an employee-count estimate. Query used: Axonius application security engineer job security champions. Result range: 3 AppSec/Product Security roles plus 1 Product Security Architect role identified in the reviewed results. Active AppSec job posting count: At least 4 publicly surfaced roles in the reviewed results: three Application Security Engineer listings and one Product Security Architect listing. Exact live count cannot be independently verified. Common skill/tool patterns: SAST, DAST, and SCA integrated into CI/CD; vulnerability monitoring, triage, and remediation coordination; threat modeling; architecture and code reviews; security automation; penetration-test coordination; web/API security; OWASP Top Ten; Python or JavaScript; and collaboration with R&D teams. (Product Security Engineer posting, Accel Job Board)
Key Initiatives
Section 3 — Programs and workflows. Security Champions program Not found in the reviewed public results. Information about a formal Security Champions program, membership, or operating model is not publicly available. Shift-left in CI/CD Security reviews occur within the SDL, and automated scanning is used to identify weaknesses. (Axonius Security Program, updated) A Product Security Engineer posting calls for implementing SAST, DAST, and SCA in the SDLC and providing developers with actionable insights, including integration into CI/CD pipelines. (Accel Job Board) Vulnerability management Publicly stated activities include monitoring, triaging, and coordinating remediation with development teams, as well as managing external penetration-test findings. (Accel Job Board) Intake sources include automated scanning, internal security reviews, third-party penetration testing, and potentially bug-bounty or internal-penetration-testing initiatives mentioned in the job posting. (Axonius Security Program, updated; Accel Job Board) Secure SDLC ceremonies Publicly identified practices include security reviews, threat modeling, security code reviews, product-architecture reviews, automated scanning, and external penetration testing. (Axonius Security Program, updated; Accel Job Board) New programs or tool rollouts in the last 6 months The reviewed materials do not establish a dated AppSec program or tooling rollout during the six months preceding
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Axonius's site