Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
Зарплата и рынок
развернуть
По международному рынку данных пока нет
На СНГ рынке: $5к/мес ($3.7к - $7.3к)
91
Крутая вакансия
развернуть
В Company hidden это четко очерченная практическая роль в архитектуре безопасности с широким влиянием и актуальными инициативами для крупного программного продукта; обязательная работа на месте в Израиле важна при оценке условий.
?Работа в офисе
Актуальные технологии
Четкие задачи
Влияние на продукт
Безопасность ИИ
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Software Architect, Security (Cybersecurity): Leading security architecture enablement for the JFrog Platform and Artifactory with an accent on architectural guardrails, automated security reviews, and AI-assisted security workflows. Focus on preventing SSRF, XSS, SQL injection, and broken access control, while driving cloud-native security, compliance initiatives, and post-quantum cryptography readiness.
Location: Netanya/Tel Aviv, Israel
Company
hirify.global develops the hirify.global Platform, including Artifactory, to manage, accelerate, and secure software delivery from code to production.
What you will do
Lead security architecture enablement for the R&D group building the hirify.global Platform and Artifactory.
Raise engineers’ security awareness through programs covering best practices, anti-patterns, and common mistakes.
Define and improve security rules, architectural guardrails, automated pull-request security reviews, and AI-assisted design workflows.
Help engineering teams prevent and resolve SSRF, XSS, SQL injection, broken access control, and other attacks through central architectural improvements.
Coordinate with the CISO and AppSec teams to adopt company-wide security policies within R&D.
Act as a central technical contributor to FedRAMP certification, post-quantum cryptography readiness, and related initiatives.
Requirements
Experience as an Architect, Principal Engineer, or Staff Engineer with a strong security background.
Hands-on experience providing technical assistance to development teams.
Deep, production-level experience with Java or C# and their ecosystems.
Solid understanding of modern architecture patterns across AWS, GCP, Azure, and self-hosted/on-premises deployments.
Strong knowledge of networking fundamentals and authentication/authorization protocols, including OAuth2/OIDC, SAML, and mTLS.
Practical knowledge of common attack classes, including SSRF, XSS, SQL injection, and broken access control, and how to remediate them.
Excellent communication skills, self-management, and the ability to set direction across a large, multi-team organization without direct authority.
Ability to operate as an enabler through teaching, tooling, and influence rather than gatekeeping.
Nice to have
Familiarity with FedRAMP and Common Criteria security and compliance certifications.
Exposure to post-quantum cryptography concepts and migration planning.
Experience shaping or reviewing AI-assisted development workflows, such as AI coding agents or skills.
Prior experience in enablement, platform, or developer-experience roles influencing multiple teams.
Familiarity with Go, TypeScript, or Python.
Culture & Benefits
Hands-on technical role with broad influence across a large, multi-team R&D organization.
Collaboration with engineering teams, the CISO, and AppSec specialists.
Work on security innovation, cloud-native architecture, compliance, and emerging AI-assisted workflows.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →