Application Security Team Lead

SmartRecruiters Inc. delivers an AI-powered hiring platform built for global scale, automating and optimizing the talent acquisition process. The company serves more than 4,000 customers worldwide and in 2025 joined SAP, the global leader in enterprise applications. The R&D structure is based on empowered product teams responsible for business outcomes and autonomy in problem-solving.

• Significant professional experience in Application Security, Product Security, or Secure Software Development with proven leadership or mentoring skills
• Deep understanding of common vulnerability classes (injection, broken access control, cryptographic failures, SSRF, etc.) and secure design principles
• Strong hands-on experience with penetration testing of web applications, APIs, and cloud-native architectures
• Solid knowledge of authentication, authorization, cryptography, and API security patterns
• Experience building or maturing an application security program including processes, tooling strategy, and metrics
• Experience with security testing methodologies and tools across SAST, DAST, IAST, and SCA
• Familiarity with microservices architectures and cloud environments, particularly AWS
• Excellent communication skills to articulate technical risks, translate security priorities, and build trust across teams

• Lead and grow a team of Application Security Engineers, setting direction, coaching, and owning the AppSec roadmap and KPIs
• Drive end-to-end application security: threat modeling, design reviews, internal penetration testing, manual/automated code reviews, and security testing (SAST/DAST/IAST/SCA)
• Own vulnerability management and bug bounty: define processes and SLAs, triage and validate findings, and drive remediation with engineering teams
• Define and optimize the AppSec tooling stack, integrating security into CI/CD and developer workflows to “shift left” without slowing delivery
• Secure AI/ML features and LLM integrations by assessing AI-specific risks and defining guardrails and best practices
• Set secure coding standards (OWASP) and scale security culture through training, documentation, and security champion initiatives

You may be located anywhere in Poland and work remotely or out of the Cracow office.