Lead Security Engineer

🔥 55 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

HighLevel

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2018

💼 Consulting

📦 Logistics

☁️ SaaS

💰 Series A on 2021-11

Consulting • Logistics • SaaS

HighLevel is an all-in-one marketing and sales platform designed to help businesses grow and succeed. The platform consolidates various marketing tools into a single solution, providing features such as lead capture through landing pages, surveys, forms, and calendars, as well as tools for nurturing leads via automated messaging across multiple channels including phone, SMS, email, and social media. HighLevel offers customizable solutions like online appointment scheduling, multi-channel follow-up campaigns, and pipeline management. Additionally, businesses can build websites, funnels, and landing pages using the intuitive page builder. HighLevel supports integrating with existing systems via API, and offers a membership platform for community building and course management. The platform is targeted towards marketers and offers white-labeling options for businesses to brand the software as their own. With a community-driven development approach and award-winning support, HighLevel is focused on empowering businesses to streamline their operations and enhance their marketing efficiencies.

📋 Description

• Lead Application Security initiatives across HighLevel’s products and engineering teams • Proliferate security standards recommended by the central security team within development teams • Conduct architecture reviews, secure design assessments, threat modeling, and security assessments for Web, Mobile, and API applications • Define and drive secure SDLC practices across engineering teams • Partner with developers to identify, prioritize, and remediate security vulnerabilities • Lead security reviews for AI/LLM-powered applications, agents, and AI integrations • Develop AI security guardrails against prompt injection, data leakage, insecure tool usage, model abuse, and emerging AI attack techniques • Improve security tooling and automate security testing within CI/CD pipelines • Champion secure coding through developer enablement, documentation, and training • Drive vulnerability management and improve remediation workflows • Mentor engineers and foster a security-first engineering culture • Communicate complex security risks to technical and non-technical stakeholders, influence product roadmaps, and align security and engineering objectives • Stay current with emerging threats, application security trends, and AI security advancements

🎯 Requirements

• 8+ years of experience in Cybersecurity, with deep expertise in Application Security and leading engineering-focused security initiatives • Technical knowledge securing Web, Mobile (Android/iOS), and API (REST/GraphQL) environments • Knowledge of OWASP standards and authentication protocols including OAuth 2.0, OIDC, JWT, and SAML • Experience with threat modeling, secure design and code reviews, penetration testing, and architecture reviews • Hands-on DevSecOps proficiency with CI/CD security automation • Experience with container security using Kubernetes and Docker • Experience managing SAST, DAST, SCA, and Secret Scanning tools • Specialized AI/LLM security expertise, including prompt injection, data leakage, model misuse, and insecure agent/tool integration mitigation • Programming or scripting proficiency in Python, Go, JavaScript, or Bash • Strong communication skills for influencing technical stakeholders across product and engineering teams • Preferred: GCP workload security, Terraform security, CSPM/CNAPP, red teaming/adversary simulation/purple team exercises, DevSecOps automation, security certifications, open-source security contributions, bug bounty programs, or security research