Application Security Team Lead
Core
Lead a team of application security engineers to secure products from design through production, embedding security into the development lifecycle.
Role type
Senior IC application security team lead (people management + hands-on technical)
Builds
Secure SDLC programs, penetration testing initiatives, bug bounty operations, automated security guardrails in CI/CD pipelines
Domain
SaaS, Application Security, Cloud Security
Required skills
Application security, Penetration testing, Secure SDLC (SSDLC), SAST/DAST/SCA tooling, CI/CD integration, Bug bounty management, Cloud security (AWS/GCP), Containers/Kubernetes, Web/API security protocols
Preferred skills
Hands-on coding (Python/Go/Java/Node.js), AI/LLM application security, Agentic AI security, Security certifications (OSCP/OSWE/GWAPT)
Technologies
Burp Suite, OWASP ZAP, GitHub Actions, Jenkins, GitLab CI, HackerOne, Bugcrowd, AWS, GCP, Kubernetes
Responsibilities
Lead, mentor and grow a team of application security engineers; Own and evolve the Secure SDLC program; Own the penetration testing program; Manage the bug bounty program; Drive code security at scale via SAST, SCA, and secure code reviews; Build security into CI/CD pipelines; Define and track application security KPIs; Partner with R&D to remediate vulnerabilities; Lead security incident response and post-incident reviews; Run secure development training and security champions programs
Seniority
Senior, hands-on IC with people management
