Application Security Lead (AI Security)

Location: Tel Aviv, Israel; full-time R&D role

Company

Cyera builds a unified security control plane for protecting data, access, behaviors, and AI systems across enterprise environments.

What you will do

• Own product security across R&D and provide evidence-based assurance of the platform's security posture.
• Lead adversarial validation, red team exercises, internal bug bounty activities, and security research across code, infrastructure, and architecture.
• Maintain attack-surface and sensitive-data-flow maps, and review threat models and security architecture for new services, integrations, cloud connectors, and multi-tenant components.
• Secure multi-tenant boundaries, authorization, secrets, key handling, AI and agentic systems, prompt-injection defenses, and customer data paths.
• Define risk standards, severity models, security gates, exception processes, and secure-by-default development patterns.
• Build security automation, developer tooling, a security champions network, incident-readiness practices, and the product security function and team.

Requirements

• 8+ years of application or product security experience, including hands-on ownership of a security program.
• Deep expertise in authentication, authorization, multi-tenant isolation, API and web security, cryptography, secrets management, software supply-chain risk, and business-logic vulnerabilities.
• Strong engineering background with the ability to write code in Python, Go, TypeScript, Java, or a similar language, and understand distributed systems.
• Cloud-native security experience with AWS, GCP, or Azure, including IAM, Kubernetes, containers, CI/CD, network boundaries, and infrastructure as code.
• Experience with threat modeling, security architecture reviews, secure SDLC, developer-facing security tooling, and security leadership across engineering teams.
• Working knowledge of SOC 2, ISO 27001, or similar frameworks, with sound judgment in distinguishing practical risks from theoretical ones.

Nice to have

• Experience in a cybersecurity startup, cloud-native SaaS company, or high-consequence data environment.
• Offensive security experience including penetration testing, vulnerability research, exploit development, published CVEs, or elite technology-unit service.
• Experience with bug bounty programs, AI/ML security, LLM applications, agentic architectures, or large-scale sensitive-data platforms.
• Experience hiring, mentoring, and growing security engineers, or contributing through research, open-source tooling, writing, or talks.

Culture & Benefits

• Technical leadership role under Infrastructure, serving all of R&D.
• Close collaboration with Security, Product, Engineering leadership, DevOps, and Infrastructure teams.
• Opportunity to build the product security function and team from a hands-on starting point.
• Focus on automation, self-service, secure-by-default engineering, and continuous assurance.