מה התפקיד שלך יכלול?
applications, LLM-based systems, AI agents, and automation tools.
• Assessing AI use cases for risks such as data leakage, prompt injections, insecure plugins,
excessive permissions, model misuse, and exposure of sensitive information.
• Reviewing applications, cloud, API, and AI solution architectures from a security perspective.
• Supporting secure implementation of AI and non-AI applications throughout the SSDLC.
• Defining practical AI security controls aligned with industry best practices, responsible AI
principles, and emerging AI security standards.
• Working with development and infrastructure teams to identify, prioritize, and remediate
security risks.
• Providing hands-on security guidance, secure design recommendations, and remediation
plans.
• Evaluating risks related to prompts, outputs, embeddings, training data, AI-generated content,
and third-party AI solutions.
למי התפקיד יתאים?
• 23+ years of experience in application security, product security, DevSecOps, or secure
software engineering.
• Strong understanding of AI security risks in LLMs, AI-enabled applications, AI agents, and
data-driven systems.
• Solid understanding of SSDLC, DevSecOps practices, and security testing tools such as
SAST, DAST, SCA, and secrets scanning.
• Experience with one or more programming languages such as Python, Java, .NET,
JavaScript, C, or similar.
• Familiarity with modern application architectures, including APIs, microservices, containers,
serverless, and cloud environments.
• Knowledge of common security frameworks and best practices such as OWASP Top 10,
OWASP LLM Top 10, NIST, and secure-by-design principles.
• Strong analytical, troubleshooting, and problem-solving skills.
• Excellent communication skills, including the ability to explain technical risks to both technical
and non-technical stakeholders.
• Proactive, detail-oriented, and eager to learn new technologies and security domains.