Description
We are looking for a DevSecOps and Application Security Lead to join our team and build our application security from scratch. In this role, you will lead the security direction within our department, focusing on integrating security into the software development process. By balancing automation with practical DevSecOps practices, you will help our engineering teams find and fix vulnerabilities early, ensuring our products are safe and strong without slowing down development.
Responsibilities
- Build the DevSecOps/AppSec function from scratch, and create the roadmap, KPIs, and metrics for leadership
- Create secure development processes, including release security gates and vulnerability management
- Choose, configure, and integrate security scanners (SAST, SCA, secrets) with a focus on automation and AI-assisted workflows
- Integrate security checks into pipelines and development processes together with Engineering, DevOps, and Product teams
- Run threat modeling and security reviews for high-risk systems and major architecture changes
- Create clear security standards, checklists, and practical guidelines for developers (covering code, APIs, and secrets)
- Launch and grow a Security Champions program to involve engineers in security processes
- Help investigate incidents related to application vulnerabilities, leaked secrets, and supply-chain attacks
Requirements
- 5+ years of experience in DevOps, SRE, Platform Engineering, or related infrastructure/security roles
- 3+ years focused on DevSecOps and Application Security
- 1+ years in a lead/ownership role
- Deep understanding of modern software development, Git workflows, and hands-on experience integrating security checks into CI/CD pipelines without creating bottlenecks
- Practical experience with SAST, SCA, secrets scanning, and vulnerability management (triage, risk rating, remediation, and validation)
- Ability to select and scale security tools based on accuracy, false-positive rates, and developer experience
- Strong knowledge of web/API/mobile risks (OWASP Top 10, auth, supply-chain risks) and ability to run threat modeling and secure design reviews
- Good scripting skills (Python, Bash, or similar) and understanding of cloud-native/containerized environments
- Ability to write clear security requirements and guidelines for developers
- English - Intermediate+ or higher
Nice to Have
- Experience building AppSec/DevSecOps functions from scratch or early maturity stages
- Hands-on experience with tools like Snyk, Aikido, Semgrep, Trivy, Gitleaks, GitHub/GitLab Security, or SonarQube
- Experience with cloud/IaC security, Kubernetes, and mobile app security
- Knowledge of compliance standards (SOC 2, ISO 27001, PCI DSS, DORA) and experience with Bug Bounty or pentest coordination
- Experience with Security Champions programs and AI-assisted security tools
We offer
- 20 paid vacation days per year
- 10 paid sick leave days per year
- Public holidays as per the company’s approved Public holiday list
- Medical budget
- Opportunity to work remotely
- Professional education budget
- Language learning budget
- Wellness budget (gym membership, sports gear and related expenses)
Similar jobs
Est. 120,000 EUR
We are inviting you, a highly motivated and results-oriented Enterprise & Cloud Security Manager to join our team on a full-time basis. Our team has unique expertise in research, analysis, and product development. By…
Est. 80,000 EUR
We are looking for an Endpoint Security Engineer to join our Security team. In this role, you will be responsible for implementing, operating, and improving endpoint security controls across corporate workstations, produ…
Est. 80,000 EUR
We are looking for a Security Operation Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detec…
Est. 120,000 EUR
We are looking for a Head of Security Operations Center (Head of SOC) to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast an…
Est. 120,000 EUR
We are looking for a Detection Engineering & Automation Lead to improve detection quality and automation so high-risk attacker behavior is identified with less noise and faster investigation. This is a unique opportu…
Est. 80,000 EUR
We are inviting you, a highly motivated and results-oriented Windows DevOps Engineer, to join our team on a full-time basis, ensuring and developing solutions, as well as strengthening the product infrastructure. Our tea…
Est. 60,000 EUR
We invite you, a highly motivated and results-oriented Windows Site Reliability Engineer, to join our team full-time and ensure the reliability and stability of the company's infrastructure. Our team has unique expertise…
Est. 120,000 EUR
Responsibilities Manage team capacity, resource allocation, and establish effective 24/7 on-call rotation processes for incident response. Take ownership of the infrastructure budget (FinOps), optimizing cloud costs acro…
Est. 80,000 EUR
At Cision, we believe in empowering every individual to make an impact. Here, your voice is heard, your ideas are valued, and your unique perspective fuels our collective success. As part of our global team, you'll thriv…
Est. 80,000 EUR
We are looking for a technical Head of Corporate IT who is ready to take full ownership of the corporate infrastructure strategy, budget management, and the transformation of access and security processes. In this role,…
Est. 60,000 EUR
We are inviting you, a highly motivated and results-oriented PHP/WordPress Engineer to join our team for ensuring solutions, as well as strengthening the product.Our team has unique expertise in research, analysis, and p…
Est. 80,000 EUR
We are looking for a Senior Web Designer who combines strong visual craft and product thinking to design high-converting web experiences that drive measurable acquisition results. You will join our cross-functional acqui…
Est. 80,000 EUR
We are inviting you, a highly motivated and results-oriented Android Developer to join our team for ensuring solutions, as well as strengthening the product. Our team has unique expertise in research, analysis, and produ…
Est. 55,000 EUR
Responsibilities Create and maintain reporting and analytical dashboards that provide key business insights Search for insights and patterns through data analysis Based on the analysis results, make conclusions for the b…
Est. 120,000 EUR
We are looking for a Cyber Defense Manager to lead, mature, and operate our resilient security operations capability. In this role, you will own the defense of our environment, ensuring fast and precise threat detection,…
Est. 80,000 EUR
Responsibilities Management of the global Finance Operations function: accounts payable, corporate expenses, revenue, and banking operations End-to-end financial process ownership, including procurement and supplier sett…
Our Helpdesk team is the foundation of the company’s internal IT infrastructure. We ensure secure access to resources, manage the device fleet, maintain network reliability, and support core corporate services, enabling…
Est. 152,500 USD
At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…
We are looking for a On-Duty Customer IT Support Specialist to join our Customer IT Support team. The Customer IT Support team is responsible for managing technical issues of the company’s clients, resolving issues relat…
Est. 80,000 EUR
Responsibilities Design, standardize, and scale global Employee Lifecycle processes (Onboarding, Transfers, Offboarding, and other HR operations) across multiple regions, ensuring compliance, efficiency, and a consistent…
DevOps Team:We are looking for Network Engineer for our DevOps team that combines development and operations to create an efficient and reliable IT infrastructure. The team is responsible for service deployment and backu…
Company Mission Payhawk is a leading global spend management solution for scaling businesses. Headquartered in London and combining company cards, reimbursable expenses and accounts payable into a single product; its fut…
Est. 177,500 USD
At Beyond Finance, we've made it our mission to help everyday Americans escape the endless cycle of crippling debt and step into a brighter financial future. Through compassionate, individualized care, a culture focused…
Est. 54,000 EUR
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
About Nebius: Nebius is leading a new era in cloud infrastructure for the global AI economy. We are building a full-stack AI cloud platform that supports developers and enterprises from data and model training through to…
Est. 80,000 EUR
We are looking for a Senior iOS Developer to join the JustMarkets mobile team. You will work on a high-load mobile product with many real-time data updates, complex business logic, and a strong focus on performance and u…
Est. 185,500 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
We are looking for an L&D Project Manager for our Training Team — a role focused on improving operational performance rather than simply delivering learning initiatives. You will work at the intersection of Learning…
Est. 185,500 USD
Our Purpose At SentinelOne, we are driven by a clear purpose: to give the advantage to those who secure our future. As AI reshapes how organizations build, operate, and innovate, the responsibility to protect them become…
We are seeking a highly technical and resilient professional to lead our CECL and IFRS 9 provisioning framework within the Integrated Risk Management team. This role is central to our IPO readiness and financial reportin…