Product Security Architect

Location: Tel Aviv District, Israel. Hybrid work model: three days per week from the North Tel Aviv office and two days per week working from home.

Company

hirify.global is an AI-powered finance automation platform for mid-market businesses, providing accounts payable, global payouts, procurement, expenses, corporate cards, supplier management, tax compliance, and treasury solutions.

What you will do

• Work with development and product teams on application and product security throughout the software development lifecycle.
• Perform hands-on security reviews of applications, APIs, services, and code; identify, investigate, validate, and assess vulnerabilities and security findings.
• Provide practical remediation guidance and support development teams through remediation.
• Perform threat modeling and security analysis for new and existing product capabilities.
• Use and improve security controls and tooling including SAST, SCA, DAST, API Security, WAF, and automated security checks.
• Assess web applications, APIs, microservices, containers, Kubernetes, cloud-native services, and support secure coding, vulnerability disclosure, and Bug Bounty activities.

Requirements

• 5+ years of hands-on experience in Application Security, Product Security, or a closely related software security role.
• Strong understanding of software development and ability to read, understand, and review application code in .NET, JavaScript/TypeScript, or comparable modern technologies.
• Hands-on experience identifying and analyzing application and API security vulnerabilities, performing threat modeling, and conducting application security reviews.
• Strong understanding of authentication, authorization, session management, web security, API security, and mobile security.
• Strong knowledge of OWASP Top 10 and practical remediation.
• Hands-on experience with SAST, SCA, DAST, API Security, and WAF.
• Experience with microservices, APIs, containers, Kubernetes, cloud-native environments, AWS security and/or Azure security.
• Understanding of modern CI/CD and software development environments.
• Strong analytical, problem-solving, communication, and collaboration skills, including the ability to turn findings into practical technical recommendations and work with engineering, product, and security teams.

Nice to have

• Experience developing security tooling or automation.
• Experience with CI/CD and software supply chain security.
• Experience with fintech, payments, or security-sensitive SaaS products.
• Experience with vulnerability research, Bug Bounty, or vulnerability disclosure programs.
• Familiarity with AI/LLM application security, AI coding tools, MCP, or agentic systems.
• Security research, open-source contributions, or other demonstrated hands-on security work.

Culture & Benefits

• Collaborative, diverse, global engineering environment with a fast-paced start-up vibe.
• Flexible hybrid workplace, career coaching, and competitive benefits.
• Tel Aviv office shuttle services, employee parking, and snacks and treats.