Security Engineer

• Define technical security and privacy requirements for products, medical devices, and healthcare solutions
• Conduct Threat Modeling and Cybersecurity Risk Assessments
• Analyze product security posture and define risk mitigation measures
• Design and maintain security and privacy controls throughout the product lifecycle
• Manage and assess vulnerabilities during pre-market and post-market activities
• Assess vulnerabilities identified through SCA, SAST, DAST, IaC, Penetration Testing, and other security testing activities
• Provide technical input into remediation plans and follow up on remediation activities
• Investigate complex security issues and provide technical recommendations
• Support Security Incident Response and forensic activities
• Technically coordinate external security testing, including penetration testing, validation of findings, and remediation follow-up
• Develop and maintain technical documentation, processes, playbooks, and Product Security tools
• Stay up to date with emerging security threats, technologies, and best practices
• Act as a technical reference for Product Security, sharing knowledge and supporting less experienced security professionals
• Collaborate with Software Development, Cloud, Product Security, and Incident Response teams

Senior Product Security Engineer – Pharma

• Collaborate with R&D teams to identify, prioritize, and drive security requirements and mitigation strategies throughout the development lifecycle
• Conduct architecture, design, and threat modeling security reviews for web, AWS cloud, and distributed systems
• Produce actionable security architecture documents, design specifications, and technical guidelines for engineering
• Lead incident response efforts during active product cybersecurity events and drive cross-functional remediation across engineering teams
• Advance and secure Axonius's platform and modern AI-driven capabilities
• Own the development lifecycle's security strategy and ensure cloud and distributed systems are engineered securely by design
• Support core development teams across Israel and Portugal and align security posture from initial planning through deployment

Senior Product Security Architect

• Monitor and improve the organisation's cybersecurity posture
• Manage and coordinate vulnerability remediation activities with internal and external stakeholders
• Support cybersecurity incident response activities and investigations
• Analyse security alerts, threats, risks and vulnerabilities
• Assist in implementing security controls across Microsoft 365, Azure and endpoint environments
• Support cybersecurity governance, risk and compliance initiatives, including NIS2, ISO 27001 and internal policies
• Participate in security assessments, audits and supplier security reviews
• Produce cybersecurity metrics, dashboards and reports for management
• Collaborate with IT teams, business units and external partners to improve security practices
• Contribute to cybersecurity awareness and training initiatives

Cybersecurity Specialist

• Develop and improve internal projects supporting the Cyber Program evaluation process
• Contribute to the evolution of the maturity evaluation process
• Help entities understand cybersecurity and IT Risk requirements
• Support implementation of consistent assessment practices across Group entities
• Deploy the maturity evaluation process across entities within your perimeter
• Review and evaluate evidence submitted by entities against Group requirements
• Ensure consistency of assessments with those performed for other Group entities
• Communicate changes impacting entities within the Cyber Program
• Facilitate relationships between Group IT providers and entities
• Document assessment results and prepare reporting requested by Program Governance
• Support monitoring of compliance with the Group Cyber Security and IT Risk framework
• Contribute to projects enhancing the Cyber Program evaluation process

Cyber Security Program Analyst

• Own identity and SSO in Google Workspace, including groups, SCIM provisioning, MFA, and access policies
• Run the macOS fleet through Iru, including enrollment, configuration, patching, and compliance
• Automate joiner, mover, and leaver flows from Rippling
• Own SaaS licensing and application provisioning with lightweight support through automation and self-service
• Own security controls across AWS, GitHub, Kubernetes, and the SaaS environment
• Manage role-based access, IAM hygiene, cloud guardrails, network boundaries, and secrets management
• Run vulnerability management from findings through remediation and verification with owners and SLAs
• Run access reviews and generate audit evidence through Vanta
• Contribute security perspectives to incidents and post-incident reviews
• Use AI-assisted and agentic workflows to reduce manual work and investigate issues faster
• Report to the Senior Manager, Platform Engineering and collaborate across Maze

Senior Security Engineer

• Build product security across the engineering organization
• Build the product security practice and report to the Head of Information Security
• Embed security into the software development lifecycle from architecture and design through build, deployment, and remediation
• Introduce security gates, secure release practices, and guardrails into engineering workflows
• Select and operate application security tooling
• Use AI and automation to increase security coverage without slowing product delivery
• Lead threat modelling for new products and major changes
• Provide secure-by-design input for products involving card issuing, embedded finance, banking-as-a-service, and other payment products
• Define secure-by-default application architecture patterns for authentication, authorization, API design, and service-to-service trust
• Evaluate traditional tooling versus AI-assisted alternatives
• Own CI/CD pipeline and software supply-chain security controls
• Implement and improve container image scanning, dependency management, software bills of materials, infrastructure-as-code checks, and deployment-manifest security checks
• Introduce AI agents and LLM-assisted workflows as the default application-security delivery mechanism
• Drive remediation of application-layer findings with engineering teams, including penetration-test, scanner, and disclosure-report findings