Application Security Engineering Manager

Stack

Responsibilities

• ▹Lead and grow the AppSec team: hiring, onboarding, performance and career development
• ▹Own the formalisation of AppSec strategy and roadmap with measurable outcomes
• ▹Be a credible technical partner on threat models, security architecture, agentic tooling design and risk decisions
• ▹Define the team's operating rhythm: OKRs, quarterly planning, cross-team coordination and stakeholder communication
• ▹Work with business leadership, engineering leads, the Developer Platform team, the Architecture Working Group, Legal and Moderation
• ▹Help evolve the approach to AI-assisted development security, including agentic coding tools and AI-generated code
• ▹Keep AppSec aligned with other Infosec teams on shared risks, incidents and cross-cutting initiatives
• ▹Represent AppSec externally with customers, auditors and in compliance programmes such as SOC2 and ISO42001

Requirements

• ▹Strong engineering background in application security: threat modelling, secure design review, (AI-)SAST/SCA tooling, vulnerability management and/or security automation
• ▹Strong Python and JavaScript skills
• ▹AWS and/or GCP experience from a cloud infrastructure perspective, familiarity with GitHub Actions
• ▹Meaningful people management experience: hiring, growing and performance-managing security engineers
• ▹Led or significantly contributed to an AppSec programme in a fast-growing SaaS or AI company, ideally where engineering scaled faster than security
• ▹A genuine point of view on AI-native security engineering: how LLMs and agentic tools change the attack surface and how to use them defensively
• ▹Experience in a mature engineering culture, embedding security as a collaborative partner
• ▹Strong communication across deeply technical, leadership and product audiences

Nice to have

• ▹Kubernetes experience from an operational/security perspective
• ▹Familiarity with the current stack: Semgrep, Wiz, CrowdStrike, HackerOne, Claude Code, Cursor, GitHub Actions, StepSecurity
• ▹Prior experience as a Staff or Principal security engineer before moving into management

Soft skills

What we offer

• ▹Flexible, remote-friendly role based in Europe or at the London, Copenhagen, Munich or Zurich hubs
• ▹Small senior team with high autonomy
• ▹Build and ship AI-native, agentic security tooling end-to-end
• ▹Scope to shape secure-by-default in a rapidly scaling AI company

About the company

Synthesia is an AI video platform for business, used by over 90% of the Fortune 100. Founded in 2017, it is headquartered in London with offices across Europe and the US.