AppSec Team Lead: AI Security & PenTesting

Forward Financing; Canada; On-site; USD 127,000 - 145,000; Full time

Benefits offered by this job

Remote-first

Flexible hours

Job summary

Forward Financing seeks a Team Lead, Application Security to drive our security program as we scale AI-powered software. You will lead a team of senior engineers, evolve the pentest program, and ensure secure development across Forward-built, third-party, and AI-enabled applications.

You will own remediation workflows with Engineering, integrate AI security solutions, and set high standards for offensive testing while growing the team and capabilities.

Qualifications

• 7+ years in application security, offensive security, or product security, with leadership experience.
• Hands-on pentesting and code-review across web apps, APIs, and AWS.
• Experience building or scaling security testing programs with SLAs.
• Knowledge of AI/LLM attack surfaces and secure SDLC practices.

Responsibilities

• Lead application and product security for Forward-built, third-party, and AI-built software.
• Evolve pentest program and remediation for existing and AI-generated software.
• Integrate AI solutions within the appsec function.
• Own remediation workflows with Engineering, including pre/post-production gap analysis.
• Partner with teams to build controls for external exposure.
• Support test-to-production reviews for AI-built work.
• Grow and develop a team of senior engineers; set testing standards.
• Build and maintain security services within Forward's app stack.

Skills

Application security

Pentesting

Code review

AWS

Cloud security

Leadership

Communication

Education

Bachelor's Degree in CS or equivalent

Tools

Ruby

Python

Go

AWS (Cloud)

Job description

Forward Financing seeks a Team Lead, Application Security to drive our security program as we scale AI-powered software. You will lead a team of senior engineers, evolve the pentest program, and ensure secure development across Forward-built, third-party, and AI-enabled applications.

You will own remediation workflows with Engineering, integrate AI security solutions, and set high standards for offensive testing while growing the team and capabilities.