{"id":3733167,"url":"https://alion.io/job/silverfort-product-security-engineer","title":"Product Security Engineer","company":{"id":49155,"name":"Silverfort","domain":"silverfort.com","url":"https://alion.io/company/silverfort","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Burp Suite","optional":false},{"name":"ChatGPT","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"Cursor","optional":false},{"name":"CVE","optional":false},{"name":"Dependabot","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Semgrep","optional":false},{"name":"Snyk","optional":false},{"name":"Terraform","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-11-04T07:41:29Z","employer_posted_date":"2026-11-04","last_verified_at":"2026-11-07T12:12:10Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Description\nSilverfort is on a mission to bring identity security everywhere - to every human, machine, and AI agent, both on-premises and in the cloud.\nOur unique technology secures identities and access at runtime, in ways that weren’t possible before. With the broadest identity security platform in the market, trusted by more than 1,000 customers, including many Fortune 100 companies, Silverfort is uniquely positioned to lead the fast-growing identity security category.\nJoining Silverfort means becoming part of a fast-moving team with a culture of innovation and collaboration that goes above and beyond to help our customers and each other on a journey to reshape the future of identity security.\nWe are looking for a Senior Product Security Engineer to join us and own product security across Silverfort’s engineering organization. In this role, you will embed security into the software development lifecycle, partner closely with R&D as an enabler, and build the programs, tooling, and culture that make security a first-class part of how we build.\nResponsibilities\nLead threat modeling across products, features, and architecture changes, and turn findings into actionable security requirements\nOwn product security tooling end-to-end - SAST, DAST, SCA, and secrets scanning - from selection and integration to tuning, triage, and remediation\nRun hands-on security code and design reviews, finding real vulnerabilities before they ship\nPartner with R&D to secure new AI/ML features, covering prompt injection, data exposure, and model misuse\nBuild security guardrails and secure coding guidelines that make the secure path the easy path for R&D teams\nOwn vulnerability intake and CVE handling - responsible disclosure, triage, remediation, and CVE issuance - and coordinate external penetration tests through to closure\nLaunch and run the bug bounty program: platform selection, scope, rewards, and researcher relationships\nDrive supply chain and CI/CD security: pipeline hardening, secrets management, SBOM generation, and dependency risk\nRequirements\n5+ years of hands-on experience in application or product security at a software company or security vendor\nDeep knowledge of OWASP Top 10 and web, API, and cloud vulnerability classes, plus cryptography fundamentals (key management, TLS, hashing), with the ability to validate vulnerabilities in real code\nHands-on experience with SAST (Semgrep, Checkmarx, or similar), DAST (Burp Suite, OWASP ZAP), and SCA (Snyk, Dependabot, or Black Duck)\nPractical threat modeling experience, with a track record of making it useful for engineering teams\nStrong understanding of OAuth 2.0, OIDC, SAML, and JWT, and the security implications of each\nCloud-native security across AWS or Azure - workloads, containers, serverless, and IaC (Terraform) - and CI/CD pipeline security, including security gates and secrets management (Vault, AWS Secrets Manager, or similar)\nPython or Bash scripting for building security tooling and automating findings workflows\nHands-on use of AI coding and reasoning tools (Claude, ChatGPT, Copilot, Cursor, and similar) in real production work - using them to ship faster and to higher quality, not just to experiment\nClear communication and the ability to drive remediation across engineering teams\nAdvantages:\nCVE research, bug bounty hunting, or a track record of responsible disclosure\nOffensive security background - OSCP, CTF experience, or penetration testing certifications\nDepth in identity protocols: token flows, delegated trust patterns, and identity-related attack vectors\nExperience securing AI/ML features or pipelines","description_format":"text","description_chars":3619,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"Israel","iso":"IL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Identity Management"],"lifecycle":[{"event":"open","at":"2026-11-04T08:57:44Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":24,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-07T05:47:08Z"},"pay":null,"html_url":"https://alion.io/job/silverfort-product-security-engineer","json_url":"https://alion.io/job/silverfort-product-security-engineer.json","meta":{"generated_at":"2026-11-07T13:40:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":16794,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-08T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49155},"rest":"https://alion.io/mcp/rest/get_company?id=49155"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsilverfort-product-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsilverfort-product-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsilverfort-product-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/silverfort-product-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsilverfort-product-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3733167}},{"tool":"search_jobs","arguments":{"company":"silverfort.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3733167},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}