Application Security Engineering Manager

Required Qualifications

• You’re a strong communicator who can operate across audiences — from deeply technical discussions with staff engineers, to clear risk framing for leadership, to pragmatic negotiation with product and engineering partners.
• You have a strong engineering background in application security, with hands-on experience in areas such as threat modelling, secure design review, (AI-)SAST/SCA tooling, vulnerability management, and/or security automation.
• You are very comfortable with Python and JavaScript. You have experience with AWS and/or GCP from a cloud infrastructure perspective, and you know your way around GitHub Actions.
• You have meaningful people management experience — you’ve hired, grown, and performance-managed security engineers, and you understand what good looks like at senior IC levels.
• You’ve led or significantly contributed to an AppSec programme in a fast-growing SaaS or AI company, ideally one where the engineering organisation was scaling faster than the security team.
• You have a genuine point of view on AI-native security engineering — how LLMs and agentic tools change the attack surface, and how to use them defensively. This space is central to what we’re building and you need to be able to lead credibly within it.
• You’ve worked in an environment with a mature engineering culture and understand how to embed security as a collaborative partner rather than a gate.