Lead Application Security/DevSecOps Engineer

🕒 July 17

🇵🇱 Poland – Remote

⏰ Full Time

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 45%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Faria Education Group

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2008

📚 Education

Education

Faria Education Group is a global leader in international education systems and services, empowering over 10,000 schools and 4 million students in 155 countries. They provide a comprehensive suite of solutions for curriculum management, teaching and learning, admissions, school-to-home communication, online courses, and professional development. Their flagship products include ManageBac, OpenApply, Atlas, and SchoolsBuddy, which are designed to streamline and enhance educational excellence. Faria Education Group is committed to innovation and excellence, offering integrated support to improve the educational experience for learners, educators, and families worldwide.

📋 Description

• Conduct an initial deep-dive assessment and evaluation to drive risk-based prioritisation • Establish and own the application security program across all five products • Define and embed a secure SDLC, including security requirements, design reviews, guardrails, and coding standards for AI engineering • Select, deploy, and operationalise SAST, DAST, SCA/dependency, and secrets-scanning tools in CI/CD • Implement and operationalise secrets management, including detection, rotation, and vault integration • Build risk-based vulnerability management and drive remediation across teams and technology stacks • Lead remediation of vulnerabilities as needed in support of software engineering • Conduct threat modelling and security reviews for new architecture and significant features • Improve cloud security posture across AWS and Azure in partnership with platform/infra teams • Lead technical incident response for application-layer incidents and coordinate with SOC and vCISO on cross-domain incidents • Build security awareness and a security-champions network • Uphold student-data privacy and regulatory obligations • Contribute technical evidence and metrics to support the security roadmap and future hiring decisions • Report to the VP of Engineering and work in partnership with the vCISO, DevOps team, and engineering teams

🎯 Requirements

• 7+ years in application/product security • Experience standing up or substantially maturing an AppSec program • Strong AI knowledge and curiosity • Comfortable as a founding, hands-on, solo function • Self-directed and pragmatic under ambiguity • Ability to work across Ruby on Rails, PHP/Laravel, .NET/C#, and Python • Strong cloud security across AWS and Azure • Deep grasp of common vulnerability classes and secure coding practices • Hands-on experience with AppSec tooling and DevSecOps/CI/CD integration • Threat-modeling experience • Excellent communication and influencing skills • Enhanced DBS disclosure and Enhanced Check for Regulated Activity may be required

🏖️ Benefits

• Competitive compensation • Opportunities for career development • Continued education • Online learning platform • Unlimited book purchases • Internal and external training programs • Friendly atmosphere • Group activities • Corporate events • MacBook Pro or another laptop of your specification • Peripherals and displays included

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume