We are growing and are looking for future Axonians who value personal and career growth, teamwork, and winning! About Axonius: Axonius is revolutionizing how IT and security teams gain comprehensive visibility and control over their digital assets and relationships. As the system of record for digital infrastructure, we solve complex challenges by delivering the critical context required to manage and secure devices, users, software, SaaS applications, and cloud services. By connecting to hundreds of data sources and automating key processes, we empower organizations to close security gaps and prevent incidents.  Learn more<a href="https://www.youtube.com/watch?v=PewNCbWvAKs"> about us</a> and take our<a href="https://www.axonius.com/product-tour"> Product tour</a>. What your day will look like As part of our rapid growth, we are seeking a Product Security Engineer with a strong background in application security and software engineering to join our team in Tel Aviv. This role focuses on enhancing the security posture of Axonius’ products by implementing and maintaining security tools, processes, and practices.  We are looking for someone with hands-on engineering experience, a solid understanding of application security, and a passion for embedding security into all aspects of the software development lifecycle Key Responsibilities <ul> <li>Implement and maintain security tools (e.g., SAST, DAST, SCA) as part of the SDLC and provide developers with actionable insights.</li> <li>Conduct vulnerability management activities, including monitoring, triaging, and coordinating remediation efforts with development teams.</li> <li>Perform threat modeling for new and existing features to proactively identify and address potential risks.</li> <li>Review product architectures and deployments to ensure alignment with security best practices.</li> <li>Conduct security code reviews to detect and mitigate vulnerabilities early in the development process.</li> <li>Stay up-to-date with the latest application security threats, tools, and techniques to continuously improve Axonius security practices.</li> <li>Develop and maintain security automation scripts and integrations to streamline processes and enhance security coverage.</li> <li>Assist in the coordination of external penetration testing engagements and manage findings.</li> <li>Collaborate closely with R&amp;D teams and external partners to strengthen product security practices.</li> <li>Support the development and implementation of initiatives, including bug bounty programs, internal penetration testing, and related efforts.</li> </ul> Reach Out If You Are <ul> <li>2-3 years of experience in application security, with a strong focus on securing web applications and APIs.</li> <li>Hands-on experience as a software engineer, with proficiency in modern programming languages such as Python, JavaScript, or similar.</li> <li>Strong knowledge of application security principles, including the OWASP Top Ten, secure coding practices, and vulnerability assessment techniques.</li> <li>Familiarity with security tools such as SAST, DAST, and SCA, and experience integrating them into CI/CD pipelines.</li> <li>Familiarity with threat modeling concepts and their application in the SDLC.</li> <li>Experience with vulnerability management practices, including triage and remediation workflows.</li> <li>Experience with cloud environments (AWS, GCP) and modern DevOps tools (e.g., Terraform, Docker, Kubernetes).</li> <li>Excellent English and Hebrew communication skills, both written and verbal.</li> <li>Strong sense of ownership and ability to work independently or collaboratively in a team.</li> </ul> <h3>Advantages</h3> <ul> <li>Hands-on experience conducting manual penetration testing of features, applications, and systems.</li> <li>Hands-on experience with penetration testing tools and techniques, such as Burp Suite, Metasploit, or similar.</li> <li>Familiarity with offensive security concepts and methodologies (e.g. MITRE ATT&amp;CK, PTES).</li> <li>Contributions to the security community, such as participating in bug bounties or reporting CVEs.</li> <li>Demonstrated thought leadership, such as writing blog posts, presenting at conferences, or conducting research.</li> <li>Experience with containerized and microservice architectures, including securing them.</li> <li>Experience with designing or managing bug bounty programs.</li> </ul>   Our culture and Benefits: <ul> <li>Axonius is committed to ensuring that each team member has a clear and attainable long-term career path. To support this, we allocate a yearly budget to every employee, enabling them to invest in their own growth and learning according to their specific needs and aspirations. </li> <li>We understand the importance of maintaining a healthy work-life balance. Thats why we provide our employees with three long weekends throughout the year, giving them the opportunity to rejuvenate, spend quality time with loved ones, and invest in their own well-being. In addition, we created a special parental leave policy which allows both primary caregiver and secondary caregiver to spend substantial time with their newborn. We’re also proud to offer extra vacation days for the following important life events: marriage, birth of a grandchild, special milestones related to your children, loss of pregnancy and bereavement.</li> <li>We see you. As part of our culture, our employees well-being is important to us.That’s why we offer psychological support services and support services. </li> <li>While we have physical offices in the United State, Brazil, and Tel Aviv, we embrace a flexible working culture. The majority of our employees work remotely, regardless of their location around the globe. This flexibility allows us to tap into a diverse talent pool and enables our team members to work in a way that suits their individual preferences and circumstances.</li> <li>As a global company, we strive for excellence in everything we do. To support our employees in communicating effectively across borders, we provide English lessons as part of our commitment to their success.</li> </ul> <h4>Equal opportunities:</h4> At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives, regardless of race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status.       #LI-RV1  #LI-HYBRID    <div>A little more about Axonius:  Axonius transforms cyber asset intelligence into actionability. With the Axonius Asset Cloud, customers preemptively tackle high-risk and hard-to-spot threat exposures, misconfigurations, and overspending. The integrated platform brings together data from every system in an organization’s IT infrastructure to optimize mission-critical risk, performance, and cost measures via actionable intelligence. Covering cyber assets, software, SaaS applications, identities, vulnerabilities, infrastructure, and more, Axonius is the one place to go for Security, IT, and GRC teams to continuously drive actionability across the organization. Cited as one of the fastest-growing cybersecurity startups, with accolades from CNBC, Forbes, and Fortune, Axonius supports millions of assets for leading customers across industries and around the world. At Axonius we support a diverse and inclusive workplace and believe in equal employment opportunity. We welcome people of different backgrounds, experiences, abilities and perspectives, regardless of race, color, ancestry, religion, age, sex, gender identity, national origin, sexual orientation, citizenship, marital status, disability, or Veteran status. By submitting your application to us, you acknowledge that your personal data will be processed in accordance with our <a href="https://www.axonius.com/global-job-candidate-privacy-notice" target="_blank">Global Job Candidate Privacy Notice.</a></div>

Axonius

Similar Remote Jobs