Senior Product Security Engineer (AI)

Location: Tel Aviv, Israel

Company

hirify.global develops an identity security platform that protects human, machine, and AI-agent identities across on-premises and cloud environments.

What you will do

• Lead threat modeling for products, features, and architecture changes, translating findings into actionable security requirements.
• Own SAST, DAST, SCA, and secrets-scanning tooling, including selection, integration, tuning, triage, and remediation.
• Conduct hands-on security code and design reviews and identify vulnerabilities before release.
• Partner with R&D on AI/ML feature security, including prompt injection, data exposure, and model misuse.
• Build secure-coding guidelines, security guardrails, vulnerability-intake processes, CVE handling, and bug-bounty operations.
• Drive supply-chain and CI/CD security through pipeline hardening, secrets management, SBOM generation, dependency-risk management, and external penetration-test remediation.

Requirements

• 5+ years of hands-on application or product security experience at a software company or security vendor.
• Deep knowledge of OWASP Top 10, web, API, and cloud vulnerability classes, plus cryptography fundamentals including key management, TLS, and hashing; ability to validate vulnerabilities in real code.
• Hands-on experience with SAST tools such as Semgrep or Checkmarx, DAST tools such as Burp Suite or OWASP ZAP, and SCA tools such as Snyk, Dependabot, or Black Duck.
• Practical threat-modeling experience with a track record of making it useful for engineering teams.
• Strong understanding of OAuth 2.0, OIDC, SAML, and JWT, including their security implications.
• Cloud-native security experience across AWS or Azure, including workloads, containers, serverless, Terraform-based IaC, and CI/CD pipeline security with security gates and secrets management using Vault, AWS Secrets Manager, or similar tools.
• Python or Bash scripting experience for building security tooling and automating findings workflows.
• Hands-on production use of AI coding and reasoning tools such as Claude, ChatGPT, Copilot, or Cursor to improve delivery speed and quality.
• Clear communication skills and the ability to drive remediation across engineering teams.

Nice to have

• CVE research, bug-bounty hunting, or responsible-disclosure experience.
• Offensive-security experience, including OSCP, CTF participation, or penetration-testing certifications.
• Deep experience with identity protocols, token flows, delegated-trust patterns, and identity-related attack vectors.
• Experience securing AI/ML features or pipelines.

Culture & Benefits

• Work in a fast-moving environment focused on innovation and collaboration.
• Partner closely with R&D as a security enabler and help make secure development the default path.
• Contribute to an identity-security platform trusted by more than 1,000 customers, including Fortune 100 companies.