Security Assurance Lead - Architecting Secure Deployments

Leadout Capital; Colorado; On-site; USD 140,000 - 190,000; Full time

Job summary

Leadout Capital is building a new Professional Services Security Assurance (PSSA) team within its Security Practice. This founding role focuses on delivering high-impact security engagements for customers, translating complex risks into actionable postures, and shaping the practice's methodologies.

You will lead security assessments across web, mobile, API, cloud, and AI-enabled apps, collaborate with the services org, and drive secure development practices from design to deployment.

Qualifications

• Senior: 5+ years of experience in Application Security, Product Security, or Security Consulting.
• Lead: 8+ years of experience in Application Security, Product Security, or Security Consulting.
• Hands-on experience performing application security assessments, including architecture and design reviews, threat modeling, secure code reviews, penetration testing, and cloud security reviews.
• Strong understanding of the OWASP Top 10, API Security Top 10, and common attack techniques.
• Experience assessing modern application architectures, including web applications, APIs, microservices, containers, cloud-native environments, and AI-enabled applications.
• Experience communicating security findings, risk, and remediation guidance to technical and executive stakeholders.
• Strong customer-facing consulting skills with ability to build trusted relationships and influence security outcomes.
• Excellent analytical, problem-solving, collaboration, written, and verbal communication skills.
• Proficiency in one or more programming or scripting languages such as Java, Python, JavaScript/TypeScript, Go, or C#.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Security, or a related technical field — or equivalent practical experience.

Responsibilities

• Lead customer engagements by performing in-depth, high-quality security assessments of web, mobile, API, cloud, and AI-enabled applications — including architecture and design reviews, threat modeling, secure code reviews, and penetration testing.
• Conduct threat modeling exercises to identify potential attack vectors, evaluate business risk, and recommend security controls that effectively balance security, usability, and business objectives.
• Develop comprehensive security assessment reports that clearly communicate findings, risk ratings, and actionable remediation recommendations to both technical and executive stakeholders.
• Serve as a trusted security advisor to customers by providing practical remediation guidance, security best practices, and recommendations that improve the overall security posture of their applications and services.
• Collaborate closely with the professional services org to integrate security throughout the software development lifecycle, from design through deployment.
• Develop and enhance assessment methodologies, automation, and security tooling to improve assessment quality, consistency, and scalability across customer engagements.
• Define and contribute to technical security standards, reference architectures, and secure development guidelines in partnership with internal teams and customers.
• Research emerging technologies, evolving attack techniques, and security vulnerabilities to continuously improve assessment methodologies and provide proactive security recommendations.
• Build strong customer relationships through effective communication, technical leadership, and consultative engagement throughout the assessment lifecycle.

Skills

Application Security

Security Consulting

Threat Modeling

Secure Code Reviews

Penetration Testing

Cloud Security

Security Architecture

Automation

Security Standards

Communication

Education

Bachelor's degree

Job description

Leadout Capital is building a new Professional Services Security Assurance (PSSA) team within its Security Practice. This founding role focuses on delivering high-impact security engagements for customers, translating complex risks into actionable postures, and shaping the practice's methodologies.

You will lead security assessments across web, mobile, API, cloud, and AI-enabled apps, collaborate with the services org, and drive secure development practices from design to deployment.