📅 Sep 15
Build and lead Snorkel’s security function across cloud infrastructure, application security, and compliance, setting strategy, scaling the team, and serving as the primary security partner to executives, customers, and auditors.
Vice President, Application Security
📅 Jun 4
Application SecurityAPI SecurityWhite-box Penetration TestingRed Teaming
📜 Description
- Build an AI-enabled Application Security function and define its offensive security roadmap.
- Lead advanced white-box penetration testing of web applications, APIs, cloud infrastructure, and Kubernetes environments.
- Design multi-stage attack paths against LLMs and AI-integrated systems, and conduct advanced threat modeling.
- Advise Architecture, Engineering, and DevOps teams on secure design, shift-left controls, and remediation.
- Select and deploy security tools, and develop proprietary testing tools or frameworks.
- Guide senior penetration testers and communicate findings to customers, executives, and technical teams.
🛠️ Requirements
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
- 15+ years of hands-on, progressive experience in penetration testing and offensive security.
- Prior experience conducting advanced security assessments of Application and API ecosystems, complex penetration testing of AWS and Azure cloud infrastructures and Kubernetes/Containerized Environments (AKS, EKS).
- OSCP certification (or equivalent) is preferred but not a must.
Full job description
Saviynt's AI-powered identity platform manages and governs human and non-human access to all of an organization's applications, data, and business processes. Customers trust Saviynt to safeguard their digital assets, drive operational efficiency, and reduce compliance costs. Built for the AI age, Saviynt is today helping organizations safely accelerate their deployment and usage of AI. Saviynt is recognized as the leader in identity security, with solutions that protect and empower the world’s leading brands, Fortune 500 companies and government institutions. For more information, please visit www.saviynt.com.
We are seeking a VP, Application Security to join our Security leadership team. The App Sec leader will focus on building the next-generation Application Security program, leveraging AI to elevate pen testing and shift-left functions. Expertise is expected in all areas of Application and API security, Cloud Infrastructure (AWS and Azure), and Containerized Environments, including Kubernetes (EKS and AKS).
You will be responsible for defining advanced penetration testing and red teaming use cases and mentoring our top penetration testers. This role requires strong technical depth, and the ability to influence security decisions across the organization
WHAT YOU WILL DO
- Leverage current and emerging AI capabilities to establish a world-class Application Security function, including key responsibilities outlined below.
- Lead and conduct highly advanced, in-depth white-box penetration testing of web application and APIs.
- Perform comprehensive security assessments and penetration testing on Cloud Infrastructure (AWS and Azure), including configuration, deployment models, and integrated services.
- Advise on shift-left controls and influence Engineering to adopt key controls.
- Deep-dive into Kubernetes clusters (EKS and AKS) and containerized applications, exploiting misconfigurations and security flaws in containerized workloads.
- Define the offensive security roadmap and lead the adoption of cutting-edge testing techniques and tools.
- Serve as an advisor to Architecture, Engineering, and DevOps teams, providing expert guidance on secure design patterns and critical remediation strategies across all technology domains (App, API, Cloud, K8s).
- Design and execute complex, multi-stage attack paths targeting LLMs and AI-integrated systems, covering LLM top 10 vulnerabilities.
- Act as primary point person in customer facing discussions, and assume responsibility to address Application Security issues to address customer needs.
- Lead advanced threat modelling exercises for major initiatives, focusing on identifying sophisticated, high-impact risks specific to our unique environment.
- Analyse, prioritize, and articulate complex security findings based on holistic risk, exploitability, and business context, focusing on vulnerabilities that pose a significant threat to organizational goals.
- Drive the selection, customization, and deployment of best-in-class security tools and develop proprietary tools or frameworks to address unique testing challenges.
- Develop and present executive-level reports and technical findings, ensuring clear and impactful communication to both senior non-technical leadership and deep-technical teams.
- Mentor and formally guide senior and principal-level penetration testers, fostering a culture of excellence, continuous learning, and security research
WHAT YOU BRING
- Bachelor’s or Master’s degree in Computer Science, Information Security, or a related field.
- 15+ years of hands-on, progressive experience in penetration testing and offensive security.
- Prior experience conducting advanced security assessments of Application and API ecosystems, complex penetration testing of AWS and Azure cloud infrastructures and Kubernetes/Containerized Environments (AKS, EKS).
- OSCP certification (or equivalent) is preferred but not a must.
Similar jobs
Search more Cybersecurity Engineer jobs
🕒 2 days ago
Design, operate, and continuously improve enterprise security infrastructure, leading security engineering and operations across endpoint, cloud, identity, OT, vulnerability management, monitoring, incident response, and automation.
📅 Sep 15
Lidera a estratégia, governança, arquitetura e operação de IAM, conduzindo equipes e plataformas para reduzir riscos de acesso, fortalecer a conformidade e elevar a maturidade de segurança de identidades.
📅 Sep 8
Lead and scale the cybersecurity program, setting strategy and technical direction across products, infrastructure, corporate systems, and development environments while supporting defense, government, and enterprise requirements.
📅 Aug 11
Build and lead the security engineering programme from the ground up, securing cloud infrastructure, applications, and trading systems while owning regulatory readiness, incident response, and security strategy.