aiinfrastructure as codesastdevsecopsdastowaspscaapplication securitycloud securitysecure software development
Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
91
Крутая вакансия
развернуть
Чётко очерченная руководящая роль в AppSec у продуктовой компании в сфере кибербезопасности с заметной ответственностью за программы безопасности и защиту AI/LLM; гибридный формат привязан к конкретным городам.
Кликните для подробной информации
Понятная зона ответственностиАктуальные направленияПоддержка обученияГибрид только в Литве
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Application Security Lead (AI/LLM Security): Building and scaling a company-wide application security program and leading a security engineering team with an accent on secure software design, threat modeling, vulnerability management, and software supply chain security. Focus on defining AI and LLM security baselines, integrating high-signal pipeline security tooling, and enabling distributed engineering teams to ship safely.
Location: Vilnius or Kaunas, Lithuania. Hybrid work is expected, with office work encouraged and the possibility of up to two remote days per week.
Salary: €6,500–€8,000 gross per month, depending on skills and experience.
Company
hirify.global develops cybersecurity products and operates a global application security program across distributed engineering squads.
What you will do
Build, lead, and mentor the security engineering team while setting the application security strategy and roadmap.
Define secure-by-default patterns and paved-road guardrails that enable rapid and safe software delivery.
Run threat modeling for critical services and high-risk features and translate findings into clear engineering work.
Build and scale a company-wide Security Champions program across distributed squads.
Set vulnerability management standards, risk scoring, remediation SLAs, and high-signal detection practices.
Own software supply chain security, including dependency risk, SBOMs, pipeline integrity, artifact signing, and AI/LLM security baselines.
Requirements
Proven experience in Application Security, DevSecOps, or security-focused software engineering.
Proven experience leading or formally mentoring a team of security engineers.
Experience building and scaling an application security program rather than only operating third-party tools.
Strong command of SSDLC, OWASP, CWE, CVSS, modern cryptography, and secure architecture.
Deep expertise in either Application Security or Cloud Workload Security, with solid working knowledge of the other.
Hands-on experience integrating and tuning SAST, SCA, DAST, secrets, and IaC scanning tools in pipelines.
Working knowledge of software supply chain security and AI/LLM security, including the OWASP Top 10 for LLMs.
Scripting skills in Python, Bash, PowerShell, or Go, plus experience with Infrastructure as Code.
Culture & Benefits
Dedicated time and resources for learning, conferences, online learning platforms, and professional books.
Health insurance, online workouts, physical coaching, and regular mental health checks.
Choice of technical equipment and tools.
Yearly workation, Friday get-togethers, team-building activities, and company celebrations.
Additional vacation days based on tenure and premium hirify.global accounts for the employee, family, and friends.
Work-from-almost-anywhere policy alongside the hybrid office arrangement.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →