Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowFirst seen 17 minutes ago

Product Security Engineer

silverfort/54.00728 open roles

Where
Tel Aviv, Israel
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowProduct Security Engineersilverfort/54.007 · Tel Aviv, Israel

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on silverfort/54.007's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.4% of postings close within 7 days. Measured by our own scanner across the market. silverfort/54.007 postings stay open a median of 9 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.6%3 days
  3. 13.4%7 days
  4. 21.6%14 days
  5. 36.2%30 days
  6. 59.0%60 days
This job: first seen 17 minutes ago

silverfort/54.007 median: 9 days open

The posting

Silverfort is on a mission to bring identity security everywhere – to every human, machine, and AI agent, both on-premises and in the cloud.

Our unique technology secures identities and access at runtime, in ways that weren’t possible before. With the broadest identity security platform in the market, trusted by more than 1,000 customers, including many Fortune 100 companies, Silverfort is uniquely positioned to lead the fast-growing identity security category.

Joining Silverfort means becoming part of a fast-moving team with a culture of innovation and collaboration that goes above and beyond to help our customers and each other on a journey to reshape the future of identity security.

We are looking for a Senior Product Security Engineer to join us and own product security across Silverfort’s engineering organization. In this role, you will embed security into the software development lifecycle, partner closely with R&D as an enabler, and build the programs, tooling, and culture that make security a first-class part of how we build.

Responsibilities

  • Lead threat modeling across products, features, and architecture changes, and turn findings into actionable security requirements
  • Own product security tooling end-to-end - SAST, DAST, SCA, and secrets scanning - from selection and integration to tuning, triage, and remediation
  • Run hands-on security code and design reviews, finding real vulnerabilities before they ship
  • Partner with R&D to secure new AI/ML features, covering prompt injection, data exposure, and model misuse
  • Build security guardrails and secure coding guidelines that make the secure path the easy path for R&D teams
  • Own vulnerability intake and CVE handling - responsible disclosure, triage, remediation, and CVE issuance - and coordinate external penetration tests through to closure
  • Launch and run the bug bounty program: platform selection, scope, rewards, and researcher relationships
  • Drive supply chain and CI/CD security: pipeline hardening, secrets management, SBOM generation, and dependency risk

Requirements

  • 5+ years of hands-on experience in application or product security at a software company or security vendor
  • Deep knowledge of OWASP Top 10 and web, API, and cloud vulnerability classes, plus cryptography fundamentals (key management, TLS, hashing), with the ability to validate vulnerabilities in real code
  • Hands-on experience with SAST (Semgrep, Checkmarx, or similar), DAST (Burp Suite, OWASP ZAP), and SCA (Snyk, Dependabot, or Black Duck)
  • Practical threat modeling experience, with a track record of making it useful for engineering teams
  • Strong understanding of OAuth 2.0, OIDC, SAML, and JWT, and the security implications of each
  • Cloud-native security across AWS or Azure - workloads, containers, serverless, and IaC (Terraform) - and CI/CD pipeline security, including security gates and secrets management (Vault, AWS Secrets Manager, or similar)
  • Python or Bash scripting for building security tooling and automating findings workflows
  • Hands-on use of AI coding and reasoning tools (Claude, ChatGPT, Copilot, Cursor, and similar) in real production work - using them to ship faster and to higher quality, not just to experiment
  • Clear communication and the ability to drive remediation across engineering teams

Advantages:

  • CVE research, bug bounty hunting, or a track record of responsible disclosure
  • Offensive security background - OSCP, CTF experience, or penetration testing certifications
  • Depth in identity protocols: token flows, delegated trust patterns, and identity-related attack vectors
  • Experience securing AI/ML features or pipelines
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against silverfort/54.007's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on silverfort/54.007's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    silverfort/54.007's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.