Application Security Lead

🕒 April 22

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Workleap

WebsiteLinkedInAll Job Openings

201 - 500 employees

👥 HR Tech

☁️ SaaS

⚡ Productivity

💰 Private Equity Round on 2023-06

HR Tech • SaaS • Productivity

Workleap is a company that provides an integrated platform designed to improve the employee experience by focusing on engagement, performance, and development. Their suite of products includes Officevibe, Pingboard, and various Learning Management Systems (LMS) that help businesses tackle challenges like hybrid work, onboarding, professional development, and performance management. Workleap aims to create happier and more productive workplaces by making it easier for HR teams to manage and enhance their HR strategies. With a customer base exceeding 20,000 leaders globally, Workleap offers tools that are easy to implement and integrate with existing HR and productivity systems.

📋 Description

• Integrate security into CI/CD pipelines • Contribute to writing code, building tools, and collaborating with development teams • Ensure security is integrated into tools, pipelines, and agent-based workflows • Design and implement automated, policy-based security review flows • Conduct threat analyses and assessments for new features and architectures • Improve the efficiency of vulnerability detection and response • Collaborate with the Infrastructure SecOps team on shared concerns

🎯 Requirements

• 8+ years of experience in application security, DevSecOps, or security-focused software development • Strong software development background combined with security expertise • Excellent understanding of application security principles (OWASP Top 10, CWE Top 25) • Hands-on experience performing secure code reviews in C# • Experience automating security within CI/CD pipelines (GitHub Actions is a plus) • Good knowledge of Azure services, cloud security, and deployment models • Experience integrating SAST, DAST, SCA, and secret-detection tools • Proficiency in scripting (Python, Bash) for automation • Deep practical experience with AI-assisted development tools and workflows • Familiarity with authentication protocols (OIDC, SAML, OAuth) • Ability to clearly communicate security risks and trade-offs to diverse stakeholders

🏖️ Benefits

• Healthy, inclusive work environment • Opportunities for professional growth • Trust and support among team members