Senior AppSec & DevSecOps Lead for AI-Driven Apps

Faria Education Group; Kraków; On-site; PLN 260,000 - 420,000; Full time

Benefits offered by this job

Competitive compensation

Career development

Learning platform

Team events

MacBook Pro equipment

Job summary

Faria Education Group is seeking a Lead Security/DevSecOps Engineer to join the Product Engineering team in Kraków. This role is hands-on and leadership-focused, reporting to the VP of Engineering, with potential to build a small team and collaborate with vCISO, DevOps, and engineering groups.

You will drive risk-based prioritisation across five products, stand up an AppSec program, embed a secure SDLC, and integrate SAST/DAST/SCA tooling into CI/CD.

Qualifications

• 7+ years in application/product security.
• Strong AI knowledge and curiosity in the space, with proactive protection.
• Hands-on, founding, solo function — self-directed under ambiguity.
• Breadth across stacks: Ruby on Rails, PHP/Laravel, .NET/C#, Python.
• Strong cloud security across AWS and Azure.
• Deep grasp of vulnerability classes and secure coding practices.
• Hands-on with AppSec tooling and DevSecOps/CI/CD integration.
• Threat-modeling experience.
• Excellent communication and influencing skills in engineering teams.

Responsibilities

• Do an initial deep-dive assessment and prioritisation of security responsibilities.
• Stand up and own the application security program across all products.
• Define and embed a secure SDLC with guardrails and coding standards.
• Select, deploy, and operationalise AppSec tooling integrated into CI/CD.
• Implement and operationalise secrets management across CI/CD pipelines.
• Build risk-based vulnerability management and drive remediation.
• Run threat modeling and security reviews for new architecture/features.
• Improve cloud security posture on AWS (primary) and Azure.
• Lead technical incident response for application-layer incidents.
• Build security awareness and a security-champions network.
• Uphold student-data privacy and regulatory obligations.
• Contribute metrics to support the security roadmap and hiring decisions.

Skills

AppSec leadership

AI security familiarity

Hands-on leader

Cloud security AWS

Threat modeling

Secure SDLC

CI/CD tooling

Strong communication

Tools

SAST/DAST/SCA

Secrets management

GitHub Advanced Security

CI/CD integrations

AWS/Azure security tooling

Job description

Faria Education Group is seeking a Lead Security/DevSecOps Engineer to join the Product Engineering team in Kraków. This role is hands-on and leadership-focused, reporting to the VP of Engineering, with potential to build a small team and collaborate with vCISO, DevOps, and engineering groups.

You will drive risk-based prioritisation across five products, stand up an AppSec program, embed a secure SDLC, and integrate SAST/DAST/SCA tooling into CI/CD.