Lead Security Engineer

📋 Description

• Lead Application Security initiatives across HighLevel’s products and engineering teams.
• Promote security standards within Dev teams per central security guidance.
• Conduct architecture reviews, secure design assessments, and threat modeling.
• Perform security assessments for Web, Mobile, and API apps.
• Define and drive secure SDLC practices across engineering teams.
• Partner with developers to identify, prioritize, and remediate vulnerabilities.

🎯 Requirements

• 8+ years in Cybersecurity with deep Application Security expertise.
• Strong Web/Mobile/API security knowledge (OWASP, OAuth2, OIDC, JWT, SAML).
• Experience in threat modeling, secure design/code reviews, pentesting, architecture reviews.
• Hands-on DevSecOps: CI/CD security, Kubernetes/Docker, SAST/DAST/SSA/Secret Scanning.
• Specialized AI/LLM security expertise (prompt injection, data leakage, model misuse).
• Programming/scripting in Python, Go, JavaScript, or Bash; strong communication.

🎁 Benefits

• Experience with AI-enabled products and security leadership in a remote-first company.
• Opportunities to contribute to open-source security projects and security research.