Назад
Company hidden
4 дня назад

Software Architect, Security (Cybersecurity)

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Israel
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Software Architect, Security (Cybersecurity): Leading security architecture enablement for the JFrog Platform and Artifactory with an accent on architectural guardrails, automated security reviews, and AI-assisted security workflows. Focus on preventing SSRF, XSS, SQL injection, and broken access control, while driving cloud-native security, compliance initiatives, and post-quantum cryptography readiness.

Location: Netanya/Tel Aviv, Israel

Company

hirify.global develops the hirify.global Platform, including Artifactory, to manage, accelerate, and secure software delivery from code to production.

What you will do

  • Lead security architecture enablement for the R&D group building the hirify.global Platform and Artifactory.
  • Raise engineers’ security awareness through programs covering best practices, anti-patterns, and common mistakes.
  • Define and improve security rules, architectural guardrails, automated pull-request security reviews, and AI-assisted design workflows.
  • Help engineering teams prevent and resolve SSRF, XSS, SQL injection, broken access control, and other attacks through central architectural improvements.
  • Coordinate with the CISO and AppSec teams to adopt company-wide security policies within R&D.
  • Act as a central technical contributor to FedRAMP certification, post-quantum cryptography readiness, and related initiatives.

Requirements

  • Experience as an Architect, Principal Engineer, or Staff Engineer with a strong security background.
  • Hands-on experience providing technical assistance to development teams.
  • Deep, production-level experience with Java or C# and their ecosystems.
  • Solid understanding of modern architecture patterns across AWS, GCP, Azure, and self-hosted/on-premises deployments.
  • Strong knowledge of networking fundamentals and authentication/authorization protocols, including OAuth2/OIDC, SAML, and mTLS.
  • Practical knowledge of common attack classes, including SSRF, XSS, SQL injection, and broken access control, and how to remediate them.
  • Excellent communication skills, self-management, and the ability to set direction across a large, multi-team organization without direct authority.
  • Ability to operate as an enabler through teaching, tooling, and influence rather than gatekeeping.

Nice to have

  • Familiarity with FedRAMP and Common Criteria security and compliance certifications.
  • Exposure to post-quantum cryptography concepts and migration planning.
  • Experience shaping or reviewing AI-assisted development workflows, such as AI coding agents or skills.
  • Prior experience in enablement, platform, or developer-experience roles influencing multiple teams.
  • Familiarity with Go, TypeScript, or Python.

Culture & Benefits

  • Hands-on technical role with broad influence across a large, multi-team R&D organization.
  • Collaboration with engineering teams, the CISO, and AppSec specialists.
  • Work on security innovation, cloud-native architecture, compliance, and emerging AI-assisted workflows.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →