Application Security Team Lead (SaaS)

TL;DR

Application Security Team Lead (SaaS): Leading a team of security engineers to embed security throughout the software development lifecycle (SDLC) with an accent on secure-by-design culture and automated security testing. Focus on defining a scalable AppSec roadmap, managing threat modeling, and overseeing vulnerability remediation across a global cloud-native platform.

Location: Tel-Aviv, Israel

Company

A fast-growing global SaaS company providing an AI Work Platform that empowers organizations to build custom software applications and work management tools.

What you will do

• Define and execute a scalable application security roadmap aligned with rapid company growth.
• Lead, mentor, and scale a high-performing team of AppSec engineers.
• Integrate automated security testing (SAST, SCA, Secrets) into CI/CD pipelines.
• Lead threat modeling sessions and architectural reviews for major platform changes and infrastructure updates.
• Manage the bug bounty program, penetration testing, and internal vulnerability disclosures.
• Partner with GRC to ensure compliance with SOC 2, ISO 27001, GDPR, and HIPAA standards.

Requirements

• 8+ years of experience in application security.
• 3+ years of experience managing or scaling AppSec teams in cloud/SaaS environments.
• Deep expertise in securing cloud-native applications (AWS preferred) and web vulnerabilities (OWASP Top 10, CWE).
• Proficiency in Node.js, Ruby on Rails, React, Kubernetes, and Docker.
• Proven track record of optimizing AppSec tools in DevOps pipelines (GitHub).
• Strong communication skills to translate complex security concepts for developers and executives.