Head of Application Security
Core
Build and lead the application and product security function for a fast-growing data and AI security company, setting strategy and ensuring the security of shipped products.
Role type
Senior IC / Lead manager (Head of Application Security)
Builds
A modern product security program including secure SDLC, vulnerability management, security tooling, offensive security, and AI security for agentic systems.
Domain
Cybersecurity, Application Security, AI Security
Deliverable
production ML models
Required skills
Application security, Product security, Secure SDLC, Vulnerability management, Offensive security, AI security (LLM/agents), Security tooling, Team leadership, Engineering partnership
Preferred skills
Penetration testing, Bug bounty, Security product company experience, Regulated environments (FedRAMP, SOC 2, ISO 27001), Certifications (CISSP, OSCP, CSSLP)
Technologies
Static analysis, Dynamic analysis, Dependency scanning, Container scanning, Secrets detection, SBOM, AIBOM
Responsibilities
Define multi-year product security strategy and operating model; Own secure SDLC standards and controls; Manage vulnerability lifecycle; Lead offensive security program; Set AI security approach for agentic systems; Define metrics and own budget/headcount; Partner with R&D to embed security; Build and develop security team.
Seniority
Senior, hands-on IC with management responsibilities
