Lead Application Security/DevSecOps Engineer

About the role

Faria, a global leader in education SaaS solutions, is seeking a Lead Application Security/DevSecOps Engineer to own and mature its application security program across five products. Reporting to the VP of Engineering, the role works closely with the vCISO, DevOps, and engineering teams to embed security throughout the software development lifecycle.

Key responsibilities

• Define and run a greenfield application security program, establishing a secure SDLC with security requirements, design reviews, guardrails, and coding standards.
• Select, deploy, and integrate AppSec tooling (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines.
• Implement secrets management, detection, rotation, and vault integration across pipelines.
• Lead risk‑based vulnerability management, triage, prioritise, and drive remediation across multiple tech stacks.
• Conduct threat modelling and security reviews for new architectures and major features.
• Improve cloud security posture on AWS and Azure, partnering with platform and infrastructure teams.
• Lead technical incident response for application‑layer incidents and coordinate with SOC and vCISO.
• Build a security‑champions network and deliver security awareness training.

Required profile

• 7+ years of experience in application/product security, including building or significantly maturing an AppSec program.
• Strong knowledge of AI concepts and a proactive approach to protecting AI‑driven features.
• Hands‑on experience across Ruby on Rails, PHP/Laravel.NET/C#, and Python (deep in at least one).
• Extensive cloud security experience on AWS (primary) and Azure.
• Proven ability to lead vulnerability remediation and manage large vulnerability backlogs.

Required skills

• Application security (AppSec) tooling: SAST, DAST, SCA, secrets scanning.
• DevSecOps integration with CI/CD pipelines.
• Secrets management and vault solutions.
• Threat modelling.
• Vulnerability management and remediation.
• Cloud security on AWS and Azure.
• Programming languages: Ruby on Rails, PHP/Laravel.NET/C#, Python.
• GitHub Advanced Security (nice‑to‑have).

What we offer

• Competitive compensation and career development opportunities.
• Learning resources: online platform, unlimited book purchases, internal and external training.
• Friendly team atmosphere with group activities and corporate events.
• Equipment provision including MacBook Pro or laptop of choice, peripherals, and displays.