Application Security Team Lead

Location: Herzliya, Israel

Company

hirify.global develops SaaS products and provides a large-scale R&D environment.

What you will do

• Lead, mentor, hire, and develop a team of application security engineers.
• Own and evolve the Secure SDLC program, embedding security controls throughout the software development lifecycle.
• Manage penetration testing and bug bounty programs, including scoping, triage, validation, researcher and vendor coordination, and remediation follow-up.
• Drive SAST, DAST, SCA, secrets detection, secure code reviews, and security guardrails across CI/CD pipelines.
• Define application security KPIs, report risk posture, and partner with R&D and cross-functional teams on vulnerability remediation.
• Participate in application security incident response, post-incident reviews, developer training, and security champions programs.

Requirements

• 7+ years of experience in application security, penetration testing, or product security, ideally in a SaaS company.
• 2+ years of experience managing security engineers.
• Bachelor's degree in Computer Science, Information Security, or a related field.
• Deep knowledge of web and API security, including OWASP Top 10, OWASP API Top 10, SSL/TLS, and OAuth/OIDC.
• Hands-on experience with Burp Suite, OWASP ZAP, SSDLC programs, SAST, DAST, SCA, CI/CD, bug bounty programs, cloud security, containers, and Kubernetes.
• Strong communication skills and experience working with large-scale R&D environments.

Nice to have

• Hands-on coding experience with Python, Go, Java, or Node.
• Experience securing AI/LLM and agentic AI applications, including MCP security.
• OSCP, OSWE, or GWAPT certification.
• Introduction by an hirify.global team member.

Culture & Benefits

• Hands-on leadership combining strategic security programs with technical work.
• Close collaboration with R&D, DevOps, Product, and Security leadership.
• Opportunity to shape application security practices across the product development lifecycle.