Назад
Company hidden
11 дней назад

Application Security Lead (AI/LLM Security)

6 500 - 8 000€
Формат работы
hybrid
Тип работы
fulltime
Грейд
lead
Английский
b2
Страна
Lithuania
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Application Security Lead (AI/LLM Security): Building and scaling a company-wide application security program and leading a security engineering team with an accent on secure software design, threat modeling, vulnerability management, and software supply chain security. Focus on defining AI and LLM security baselines, integrating high-signal pipeline security tooling, and enabling distributed engineering teams to ship safely.

Location: Vilnius or Kaunas, Lithuania. Hybrid work is expected, with office work encouraged and the possibility of up to two remote days per week.

Salary: €6,500–€8,000 gross per month, depending on skills and experience.

Company

hirify.global develops cybersecurity products and operates a global application security program across distributed engineering squads.

What you will do

  • Build, lead, and mentor the security engineering team while setting the application security strategy and roadmap.
  • Define secure-by-default patterns and paved-road guardrails that enable rapid and safe software delivery.
  • Run threat modeling for critical services and high-risk features and translate findings into clear engineering work.
  • Build and scale a company-wide Security Champions program across distributed squads.
  • Set vulnerability management standards, risk scoring, remediation SLAs, and high-signal detection practices.
  • Own software supply chain security, including dependency risk, SBOMs, pipeline integrity, artifact signing, and AI/LLM security baselines.

Requirements

  • Proven experience in Application Security, DevSecOps, or security-focused software engineering.
  • Proven experience leading or formally mentoring a team of security engineers.
  • Experience building and scaling an application security program rather than only operating third-party tools.
  • Strong command of SSDLC, OWASP, CWE, CVSS, modern cryptography, and secure architecture.
  • Deep expertise in either Application Security or Cloud Workload Security, with solid working knowledge of the other.
  • Hands-on experience integrating and tuning SAST, SCA, DAST, secrets, and IaC scanning tools in pipelines.
  • Working knowledge of software supply chain security and AI/LLM security, including the OWASP Top 10 for LLMs.
  • Scripting skills in Python, Bash, PowerShell, or Go, plus experience with Infrastructure as Code.

Culture & Benefits

  • Dedicated time and resources for learning, conferences, online learning platforms, and professional books.
  • Health insurance, online workouts, physical coaching, and regular mental health checks.
  • Choice of technical equipment and tools.
  • Yearly workation, Friday get-togethers, team-building activities, and company celebrations.
  • Additional vacation days based on tenure and premium hirify.global accounts for the employee, family, and friends.
  • Work-from-almost-anywhere policy alongside the hybrid office arrangement.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →