Join the Cyber Architecture team of one of Israel’s leading financial organizations and take part in shaping enterprise-wide application security architecture. In this role, you’ll lead Secure SDLC initiatives, define security standards, and support strategic technology projects across application, cloud, and AI environments.
What You’ll Do:
- Define and lead the organization's Secure Software Development Lifecycle (SSDLC) strategy and framework.
- Review and approve security architectures for complex systems and strategic projects.
- Lead Architecture Governance processes and establish enterprise-wide security standards.
- Support technology projects across application, cloud, and AI environments.
- Perform Threat Modeling, identify security risks, and define mitigation solutions during the design phase.
- Collaborate closely with development managers, engineering teams, and cross-functional stakeholders.
Requirements:
- At least 5 years of experience leading Information Security Architecture in enterprise environments - Must.
- Extensive experience implementing Secure SDLC practices and integrating security tools (SAST, DAST, SCA, ASPM) into CI/CD pipelines - Must.
- Hands-on experience in Application Security, including identifying and mitigating application vulnerabilities - Must.
- Experience with Threat Modeling, Security Architecture Reviews, defining security requirements, and risk mitigation - Must.
- Experience in Cloud Security Architecture (AWS, Azure, or GCP) - Must.
- Deep understanding of Web, Mobile, API, Microservices, Cloud, and Container architectures - Must.
- Strong knowledge of security standards and methodologies such as OWASP Top 10, OWASP API Security Top 10, SAMM, and BSIMM.
- Strong leadership skills and ability to drive cross-functional initiatives.
- Excellent English communication skills, including technical documentation and professional discussions.
- Background in software development (Python, Java, Node.js, Go, or similar) - a significant advantage.
- Knowledge of AI/GenAI security risks, including LLMs and AI Agents - an advantage.
- Familiarity with security infrastructure and defensive security frameworks – an advantage.
