Lead Application Security Engineer - Build AI-Driven SecOps Program

Faria Education Group; Nanpantan; On-site; GBP 120,000 - 180,000; Full time

Benefits offered by this job

Competitive pay

Online learning

Team events

Provided equipment

Job summary

Faria Education Group seeks a Lead Security/DevSecOps Engineer to own and mature the AppSec program across its product portfolio. You will lead a hands-on, self-directed security function reporting to the VP of Engineering, partnering with DevOps, vCISO, and engineering teams.

You will define a secure SDLC, deploy AppSec tooling into CI/CD, and drive risk-based remediation across multiple stacks. Strong AI security curiosity and exceptional communication are essential.

Qualifications

• 7+ years in application/product security and leading or maturing an AppSec program
• Strong AI knowledge and curiosity for proactive protection in an engineering context
• Hands-on, self-directed leader with ability to operate under ambiguity
• Breadth across Ruby on Rails, PHP/Laravel, .NET/C#, and Python
• Solid cloud security experience in AWS (primary) and Azure
• Excellent communication and influencing skills to drive change in engineering teams

Responsibilities

• Build and own the application security program across all products (greenfield start)
• Define and embed a secure SDLC with guardrails and coding standards
• Select, deploy, and integrate AppSec tooling (SAST/DAST/SCA) into CI/CD
• Implement secrets management across pipelines and infrastructure
• Lead vulnerability remediation and risk-based triage across stacks
• Run threat modeling and security reviews for new architecture and features
• Improve cloud security posture in AWS and Azure in collaboration with Platform/Infra
• Lead incident response for application-layer incidents with SOC and vCISO
• Develop security awareness and a champions network among engineers
• Ensure student-data privacy and regulatory obligations
• Provide metrics to support security roadmap and hiring decisions

Skills

Security leadership

AppSec

AI security

Cloud security

Secure SDLC

Threat modeling

Communication

Tools

SAST

DAST

SCA

Secrets management

CI/CD integration

GitHub Advanced Security

Job description

Faria Education Group seeks a Lead Security/DevSecOps Engineer to own and mature the AppSec program across its product portfolio. You will lead a hands-on, self-directed security function reporting to the VP of Engineering, partnering with DevOps, vCISO, and engineering teams.

You will define a secure SDLC, deploy AppSec tooling into CI/CD, and drive risk-based remediation across multiple stacks. Strong AI security curiosity and exceptional communication are essential.