Team Lead, AppSec

Forward Financing

Lead application and product security as Team Lead, AppSec at Forward, a fintech company. Oversee security for both Forward-built and AI-generated software while leading a team of senior engineers.

Posted 7/13/2026full-timeRemote • 🇨🇦 CanadaSenior💰 CA$175,000 - CA$200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in application security, offensive security, and product security, with a strong focus on pentesting, vulnerability management, and secure software development lifecycle practices. Proven ability to lead teams, integrate AI solutions, and communicate security risks effectively to stakeholders.

Highest-signal resume keywords

Application SecurityPentestingVulnerability ManagementSecure SDLC PracticesTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PentestingCode ReviewWeb ApplicationsAPIsCloud InfrastructureRubyPythonGoAI/LLM Attack SurfaceSecurity Testing Program Development

Soft Skills

CommunicationTeam Development

Tools & Technologies

AWSNetwork AllowlistsEgress ProxyProxy-Level DLP

Industry Keywords

Offensive SecurityVulnerability Management WorkflowsRemediation SLAsSecurity Review ProcessAI-Generated Code Vulnerabilities

Tech Stack

Tools & technologies

AWSCloudGoPythonRubySDLC

About the role

Key responsibilities & impact

Lead application and product security across Forward-built, third-party, and AI-built software.
Evolve the pentest program: aggressively security-test and remediate existing software, then continuously test net-new agents and the software agents create.
Proactively build and integrate AI solutions within the appsec function.
Own remediation workflows and vulnerability management with Engineering, including pre-production vs. post-production gap analysis.
Partner with other teams to build controls to contain external exposure: network allowlists, egress proxy, and proxy-level DLP.
Support the test-to-production review process so AI-built work is security-reviewed before promotion.
Grow and develop a team of senior engineers; set quality and coverage standards for offensive testing.
Build and maintain security services within the Forward application stack.

Requirements

What you’ll need

Typically has 7 or more years in application security, offensive security, or product security, including team leadership.
Hands-on pentesting and code-review depth across web applications, APIs, and cloud infrastructure (AWS).
Experience building or scaling a security testing program — scoping, tooling, cadence, and remediation SLAs.
Understanding of AI/LLM attack surface: prompt injection, insecure agent tool use, and vulnerabilities characteristic of AI-generated code.
Experience with modern programming languages such as Ruby, Python, or Go, and with secure SDLC practices.
Ability to communicate risk and priorities crisply to engineers and executives.
Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience.

Benefits

Comp & perks

medical
dental
vision
a flexible time-off policy
paid parental leave
RRSP match
wellness reimbursement
volunteering days
annual professional development budget
charitable donation match