Head Of Application Security Team

TL;DR

Head Of Application Security Team (Cybersecurity): Building and leading the end-to-end product security lifecycle with an accent on secure SDLC, threat modeling, and cross-functional team management. Focus on implementing robust security architectures, vulnerability lifecycle management, and integrating advanced DevSecOps practices across all company products.

Location: Flexible. Offers remote, hybrid, or onsite work options in Yerevan, Limassol, or Warsaw.

Company

hirify.global is a fast-growing international business group specializing in the iGaming and software development industry.

What you will do

• Build and own the end-to-end Product Security lifecycle across all products.
• Lead and manage multi-disciplinary teams, including Pentesting, AppSec, DevSecOps, and Cloud Security.
• Define and enforce Secure SDLC, embedding security from design through production.
• Drive security architecture reviews and perform threat modeling for existing and new products.
• Own product vulnerability management, including discovery, prioritization, and remediation tracking.
• Report security KPIs and metrics to executive stakeholders to align with business objectives.

Requirements

• 8+ years of experience in Product Security, AppSec, or DevSecOps.
• Proven track record of building or scaling a Product Security function.
• Strong expertise in Secure SDLC and integrating security into modern development workflows.
• Experience managing multi-disciplinary security teams.
• Deep understanding of cloud-native architectures (AWS/GCP) and container security.
• Strong written and verbal communication skills in English.

Nice to have

• Experience in iGaming, FinTech, or SaaS industries.
• Hands-on experience with Kubernetes.
• Exposure to red teaming or adversary simulation.
• Familiarity with ISO 27001, PCI DSS, or SOC 2 compliance.

Culture & Benefits

• Multicultural team of top professionals with a friendly, success-driven atmosphere.
• Comprehensive health insurance program.
• Flexible work environment (remote, hybrid, or onsite).
• Paid vacations, sick leave, and personal days.
• Extensive educational support, including internal training and conference compensation.
• Free internal English courses and corporate yoga classes.