Team Lead, AppSec

Forward Financing

Team Lead, AppSec responsible for application and product security at Forward Financing. Leading a team while integrating AI solutions and enhancing software security measures.

Posted 7/13/2026full-timeRemote • 🇺🇸 United StatesSenior💰 $175,000 - $200,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in application security, offensive security, and product security, with a strong focus on pentesting, vulnerability management, and secure SDLC practices. Proven ability to lead teams, communicate risks effectively, and integrate AI solutions within security frameworks.

Highest-signal resume keywords

Application SecurityPentestingVulnerability ManagementSecure SDLC PracticesAI/LLM Attack Surface Understanding

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

PentestingCode ReviewWeb Application SecurityAPI SecurityCloud Infrastructure SecurityRubyPythonGoSecurity Testing Program DevelopmentRemediation SLAs

Soft Skills

Team LeadershipCommunication

Tools & Technologies

AWSNetwork AllowlistsEgress ProxyProxy-Level DLP

Certifications & Qualifications

OSCPOSWE

Industry Keywords

FintechRegulated EnvironmentsBug-Bounty ProgramsRed-Teaming

Tech Stack

Tools & technologies

AWSCloudGoPythonRubySDLC

About the role

Key responsibilities & impact

Lead application and product security across Forward-built, third-party, and AI-built software.
Evolve the pentest program: aggressively security-test and remediate existing software, then continuously test net-new agents and the software agents create.
Proactively build and integrate AI solutions within the appsec function.
Own remediation workflows and vulnerability management with Engineering, including pre-production vs. post-production gap analysis.
Partner with other teams to build controls to contain external exposure: network allowlists, egress proxy, and proxy-level DLP.
Support the test-to-production review process so AI-built work is security-reviewed before promotion.
Grow and develop a team of senior engineers; set quality and coverage standards for offensive testing.
Build and maintain security services within the Forward application stack.

Requirements

What you’ll need

Typically has 7 or more years in application security, offensive security, or product security, including team leadership.
Hands-on pentesting and code-review depth across web applications, APIs, and cloud infrastructure (AWS).
Experience building or scaling a security testing program — scoping, tooling, cadence, and remediation SLAs.
Understanding of AI/LLM attack surface: prompt injection, insecure agent tool use, and vulnerabilities characteristic of AI-generated code.
Experience with modern programming languages such as Ruby, Python, or Go, and with secure SDLC practices.
Ability to communicate risk and priorities crisply to engineers and executives.
Typically has a Bachelor's Degree in Computer Science or equivalent technical degree, or equivalent industry experience.
It would be nice if you also had:
Experience pentesting or red-teaming LLM applications and agentic systems.
OSCP/OSWE or comparable offensive certifications.
Experience running bug-bounty or external testing programs.
Background in fintech or other regulated environments.

Benefits

Comp & perks

Flexibility is a top priority: Our employees are empowered to choose where they want to work (whether that’s from home, in the office, or a combination of both) with flexible hours.