Team Lead, AppSec

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Forward Financing

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2012

💸 Finance

💳 Fintech

🤝 B2B

💰 $250M Debt Financing on 2021-05

Finance • Fintech • B2B

Forward Financing is a company that provides fast and flexible financing solutions for small businesses. They specialize in offering capital to small businesses that may struggle to secure funding from traditional financial institutions. With a simple application process, businesses can receive funding decisions within hours and may have funds transferred the same day. Their revenue-based financing model allows payments to adjust with the business's revenue. Forward Financing aims to provide clear and transparent terms, ensuring customer satisfaction and trust. They have been recognized for their excellent service and are rated highly by small business owners.

📋 Description

• Lead application and product security across Forward-built, third-party, and AI-built software. • Evolve the pentest program: aggressively security-test and remediate existing software, then continuously test net-new agents and the software agents create. • Proactively build and integrate AI solutions within the appsec function. • Own remediation workflows and vulnerability management with Engineering, including pre-production vs. post-production gap analysis. • Partner with other teams to build controls to contain external exposure: network allowlists, egress proxy, and proxy-level DLP. • Support the test-to-production review process so AI-built work is security-reviewed before promotion. • Grow and develop a team of senior engineers; set quality and coverage standards for offensive testing. • Build and maintain security services within the Forward application stack.

🎯 Requirements

• Typically has 7 or more years in application security, offensive security, or product security, including team leadership. • Hands-on pentesting and code-review depth across web applications, APIs, and cloud infrastructure (AWS). • Experience building or scaling a security testing program — scoping, tooling, cadence, and remediation SLAs. • Understanding of AI/LLM attack surface: prompt injection, insecure agent tool use, and vulnerabilities characteristic of AI-generated code. • Experience with modern programming languages such as Ruby, Python, or Go, and with secure SDLC practices. • Ability to communicate risk and priorities crisply to engineers and executives. • Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience. • It would be nice if you also had: • Experience pentesting or red-teaming LLM applications and agentic systems. • OSCP/OSWE or comparable offensive certifications. • Experience running bug-bounty or external testing programs. • Background in fintech or other regulated environments.

🏖️ Benefits

• Flexibility is a top priority: Our employees are empowered to choose where they want to work (whether that’s from home, in the office, or a combination of both) with flexible hours.