Application Security Team Lead

SmartRecruiters Inc. delivers an AI-powered hiring platform for global scale, automating and optimizing talent acquisition used by over 4,000 companies. In 2025, it joined SAP to accelerate AI innovation in hiring. The R&D structure follows an empowered product teams model responsible for business outcomes.

• Significant professional experience in Application Security, Product Security, or Secure Software Development with leadership or mentoring experience
• Proven ability to lead a small team, set priorities, delegate, develop people, and deliver results while remaining hands-on
• Deep understanding of common vulnerability classes (e.g., injection, broken access control, cryptographic failures, SSRF) and secure design principles
• Strong hands-on experience with penetration testing of web applications, APIs, and cloud-native architectures
• Solid knowledge of authentication, authorization, cryptography, and API security patterns
• Experience building or maturing application security programs, including processes, tooling strategy, and metrics
• Experience with security testing tools and methodologies across SAST, DAST, IAST, and SCA
• Familiarity with microservices architectures and cloud environments, particularly AWS
• Excellent communication skills to articulate risks to engineers, translate priorities for leadership, and build trust across teams

• Lead and grow a team of Application Security Engineers, setting direction, coaching, and owning the AppSec roadmap and KPIs
• Drive end-to-end application security activities including threat modeling, design reviews, internal penetration testing, code reviews, and security testing (SAST/DAST/IAST/SCA)
• Manage vulnerability processes and bug bounty programs, including triage, validation, and remediation coordination
• Define and optimize AppSec tooling, integrating security into CI/CD and developer workflows to enable "shift left" practices
• Secure AI/ML features and LLM integrations by assessing risks and defining guardrails
• Set secure coding standards (OWASP) and promote a security-first culture through training, documentation, and security champion initiatives

SmartRecruiters is an Equal Employment Opportunity and Affirmative Action employer. They do not discriminate based on legally protected characteristics. Data processing is handled by SmartRecruiters Inc. with rights to access, rectify, delete, or restrict personal data as per applicable laws.