Team Lead, AppSec

This is a fully remote position, open to applicants in Canada.

📋 Description

• Oversee application and product security for software developed in-house, by third parties, and created using AI technologies.

• Enhance the penetration testing program: rigorously security-test and address vulnerabilities in existing software, while consistently testing new agents and the software generated by these agents.

• Actively develop and incorporate AI solutions into the application security function.

• Manage remediation processes and vulnerability oversight in collaboration with the Engineering team, including conducting gap analysis between pre-production and post-production.

• Collaborate with various teams to establish controls that limit external exposure, such as network allowlists, egress proxies, and proxy-level data loss prevention.

• Assist in the test-to-production review process to ensure that AI-generated work undergoes security assessment prior to deployment.

• Mentor and expand a team of senior engineers; establish standards for quality and coverage in offensive testing.

• Develop and sustain security services within the Forward application ecosystem.

⛳️ Requirements

• Generally requires 7 or more years of experience in application security, offensive security, or product security, including leadership roles.

• Proficient in hands-on penetration testing and code reviews across web applications, APIs, and cloud environments (AWS).

• Experienced in creating or scaling a security testing program — including defining scope, selecting tools, establishing cadence, and setting remediation service level agreements.

• Familiarity with the AI/LLM attack surface: including prompt injection, insecure use of agent tools, and vulnerabilities associated with AI-generated code.

• Proficient in modern programming languages such as Ruby, Python, or Go, along with secure software development lifecycle practices.

• Capable of clearly communicating risk and priorities to both engineers and executives.

• Typically holds a Bachelor's Degree in Computer Science or a related technical field, or possesses equivalent industry experience.

🏝️ Benefits

• medical

• dental

• vision

• a flexible time-off policy

• paid parental leave

• RRSP match

• wellness reimbursement

• volunteering days

• annual professional development budget

• charitable donation match