{"id":2454769,"url":"https://alion.io/job/cyera-head-of-application-security","title":"Head of Application Security","company":{"id":17615,"name":"Cyera","domain":"cyera.com","url":"https://alion.io/company/cyera-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Comeet","truth_index":{"grade":"A","score":88,"open_postings":6,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":44,"computed_at":"2026-10-21T05:46:15Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":195000,"max_usd":442000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":3940},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"SBOM","optional":false},{"name":"Threat Modeling","optional":false},{"name":"FedRAMP","optional":true},{"name":"ISO 27001","optional":true},{"name":"LLM","optional":true},{"name":"Red Teaming","optional":true},{"name":"SOC 2","optional":true}],"status":"live","first_seen_at":"2026-10-13T14:44:09Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-21T06:39:08Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Description\nAbout Cyera\nCome join the company building the security operating model for the age of AI. AI has changed how data is used - and security must change with it. Cyera's mission is to empower businesses to accelerate AI Adoption by defining a holistic approach to securing AI - from data to access to model. Instead of perimeter controls and static policies, Cyera provides a unified control plane that understands relationships between data, access, and behaviors across humans, systems, and AI. Backed by the world’s leading investors and working with a large and growing list of Fortune 1000 companies, we are looking for world-class talent to join us as we usher in the new era of data and AI security.ty job that is used for creating requisitions 'from scratch'\nAbout the Role\nJoin our team as the Head of Application Security. You will build and lead the application and product security function for a fast-growing data and AI security company, set its strategy, and be accountable for the security of what we ship. You will report to the CISO and lead a team that spans secure development, vulnerability management, product security incident response, and offensive security.\nYou will build a modern product security program that fits how R&D builds software: security checks in the pipeline, clear standards engineers can follow, fast and fair vulnerability handling, and AI-assisted workflows that remove manual review work. You will partner closely with engineering and product leaders so that secure is the default way to ship, not a gate at the end.\nThe ideal candidate has 12 or more years of cybersecurity experience, including at least 6 years in application or product security and at least 4 years leading managers or multiple teams. We are looking for a leader who combines deep technical credibility with the judgment, influence, and operating discipline to scale a program across a large engineering organization.\nWhat You’ll Do\nStrategy and Vision: Define the multi-year product security strategy and operating model, aligned to company priorities and risk appetite, in partnership with the CISO.\nSecure Development Lifecycle: Own the secure SDLC: the standards R&D builds against, the controls that gate or warn on a build, assisting with threat modeling and design review, and the exception process.\nVulnerability Management: Own how vulnerabilities in our product and production environment are found, prioritized, assigned, and closed, with clear service levels and reporting.\nSecurity Tooling: Own the application security toolchain, including static and dynamic analysis, dependency and container scanning, secrets detection, and software supply chain visibility such as SBOM and AIBOM generation. Make sure every control has an owner and delivers value.\nOffensive Security: Lead the offensive security program, including penetration testing, bug bounty, and attack surface management. Make sure findings are fixed and that trends feed back into standards and training.\nAI Security: Set the approach for securing the AI features and agentic systems we build, including testing for prompt injection, data exposure, and misuse.\nMetrics and Investment: Define product security metrics and key risk indicators, report them to the CISO and engineering leadership, and own the budget, headcount plan, and vendor strategy for the function.\nEngineering Partnership: Work with R&D, product, and platform leaders to embed security in how the company designs, builds, and releases software, and to agree on priorities and tradeoffs.\nTeam and Talent: Build, lead, and develop a team of managers, engineers, and program managers. Set structure, hiring plans, and succession, and coach leaders to lead well.\nAgentic AppSec Fleet: Design, build, and run a fleet of AI agents that take on AppSec work at scale, such as triaging scanner findings, validating exploitability, reviewing pull requests and designs for security issues, drafting threat models, proposing fixes, and routing vulnerabilities to the right owners. Define the guardrails, human approval points, evaluation methods, and audit trail that keep agent output accurate, safe, and trusted by engineers, and report the impact on risk and review capacity.\nWhat You’ll Bring\nExperience: 12 or more years in cybersecurity, including at least 6 years in application or product security and at least 4 years leading managers or multiple teams.\nApplication Security Depth: Deep knowledge of secure software development, threat modeling, code and architecture review, and common vulnerability classes in cloud-native, API-driven, and containerized applications.\nProgram Building: Proven record of building or scaling an application security program, including tooling, standards, vulnerability management, and measurable reduction in risk.\nEngineering Influence: Record of driving security change across a large engineering organization through partnership and clear standards rather than formal authority.\nLeadership: Experience hiring, developing, and retaining strong security engineers and managers.\nVulnerability Disclosure: Experience handling product vulnerabilities and coordinated disclosure, including communication with customers and security researchers.\nCommunication and Judgment: Ability to explain risk and tradeoffs clearly to engineers, executives, and customers, and to make sound decisions under uncertainty.\nNice to Have\nOffensive Security Background: Hands-on experience in penetration testing, red teaming, or running a bug bounty program.\nAI Security: Experience securing LLM, agent, or other AI-enabled products.\nSecurity Product Company: Experience at a cloud, SaaS, or data security company.\nRegulated Environments: Experience supporting FedRAMP, SOC 2, ISO 27001, or similar programs.\nCertifications: CISSP, OSCP, CSSLP, or similar.","description_format":"text","description_chars":5837,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":4,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cloud Security","Information Security","Data Loss Prevention"],"lifecycle":[{"event":"open","at":"2026-10-13T15:45:04Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":7,"expected_fill_days":44,"reasons":["conf:2","velocity","win:early","comp:brand"],"computed_at":"2026-10-21T05:46:15Z"},"pay":null,"html_url":"https://alion.io/job/cyera-head-of-application-security","json_url":"https://alion.io/job/cyera-head-of-application-security.json","meta":{"generated_at":"2026-10-21T09:27:29Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":13345,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-22T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":17615},"rest":"https://alion.io/mcp/rest/get_company?id=17615"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcyera-head-of-application-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcyera-head-of-application-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcyera-head-of-application-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cyera-head-of-application-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcyera-head-of-application-security"}]}