{"id":2113335,"url":"https://alion.io/job/faria-lead-application-securitydevsecops-engineer","title":"Lead Application Security/DevSecOps Engineer","company":{"id":1902094,"name":"Faria","domain":"faria.org","url":"https://alion.io/company/faria-org","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Kraków, Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":58000,"max_usd":105000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":7,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"Laravel","optional":false},{"name":"PHP","optional":false},{"name":"Python","optional":false},{"name":"Ruby on Rails","optional":false},{"name":"Shift-Left","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Threat Modeling","optional":false},{"name":"GDPR","optional":true},{"name":"Ruby","optional":true}],"status":"live","first_seen_at":"2026-09-10T11:56:19Z","employer_posted_date":null,"last_verified_at":"2026-09-10T11:56:19Z","board_verified":false,"closed_at":null,"days_open":30,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":30},"description":"Faria is a leader in international education systems & services, offering an integrated suite across learning, admissions, school-to-home, and online courses — trusted by 10,000+ schools and 4 million students across 155 countries.\nOur product family includes ManageBac (curriculum, assessment & reporting for international schools), OpenApply (admissions management & CRM, used by 600+ leading international and independent schools), SchoolsBuddy (co-curricular & activity management), and Vectare (school transport management).\n\nWe are looking for a Lead Security/DevSecOps Engineer on the Product Engineering team, with a great opportunity to be self-directed and level up security practices and capabilities. We expect this to be a hands-on leadership role with a potential opportunity to build/upskill a small team. The person will report to the VP of Engineering and work in partnership with the vCISO, DevOps team, and engineering teams.\n\nWhat we offer\nCompensation - Competitive compensation and opportunities for career development\nLearning - We encourage continued education, providing an online learning platform, unlimited book purchases, and diverse internal and external training programs.\nTeam - Friendly atmosphere, group activities, and corporate events\nEquipment - MacBook Pro or another laptop of your specification, peripherals, and displays included\nZakres obowiązków\nDo an initial deep-dive assessment and evaluation to drive risk-based prioritisation of the following responsibilities\nStand up and own the application security program across all five products — this is effectively greenfield.\nDefine and embed a secure SDLC (shift-left): security requirements, design reviews, guardrails, and coding standards for an AI engineering reality.\nSelect, deploy, and operationalise AppSec tooling (SAST, DAST, SCA/dependency and secrets scanning) integrated into CI/CD.\nImplement and operationalise secrets management: detection, rotation, and vault integration across CI/CD pipelines.\nBuild risk-based vulnerability management: triage, prioritise, and drive remediation across teams and stacks. Lead remediation of some vulnerabilities as necessary in support of the software engineering team\nRun threat modeling and security reviews for new architecture and significant features.\nImprove cloud security posture across AWS (primary) and Azure, partnering with platform/infra.\nLead technical incident\nWymagania\nMust have\n7+ years in application/product security, ideally including standing up or substantially maturing an AppSec program (ideally near-zero to functioning).\nStrong AI knowledge and curiosity in the space, with the aim of proactive protection, as well as approaching problem-solving AI-first\nComfortable as a founding, hands-on, solo function — self-directed and pragmatic under ambiguity\nBreadth across stacks: able to work across Ruby on Rails, PHP/Laravel, .NET/C#, and Python (deep in one or two, competent across the rest).\nStrong cloud security across AWS (primary) and Azure.\nDeep grasp of common vulnerability classes and secure coding practices.\nHands-on with AppSec tooling and DevSecOps / CI/CD integration.\nThreat-modeling experience.\nExcellent communication and influencing skills — able to drive change in an engineering org, new to formal security.\n\nNice to have\nGitHub Advanced Security experience is a strong nice-to-have.\nThe candidate has worked with student data or PII-heavy regulated environments (FERPA, COPPA, GDPR for UK/EU students).\nProven experience managing large vulnerability backlogs: ability to classify, deduplicate, and drive burn-down across hundreds of repositories.\nAll qualified applicants will be considered for employment without regard to age, race, creed, color, national origin, ancestry, marital status, affectional or sexual orientation, gender identity or expression, disability, nationality, or sex. Faria operates a safer recruitment policy, and the successful applicant may be required to complete an enhanced DBS disclosure and an Enhanced Check for Regulated Activity.\nPlease note: Only shortlisted candidates will be contacted due to a high volume of applicants.\nTech stack\nAWS\nAzure\nCI/CD\nAppSec\nRuby on Rails\n.NET\nPHP\nLaravel\nPython\nGitHub Advanced Security\nFERPA\nGDPR","description_format":"text","description_chars":4256,"description_truncated":false,"requirements":{"experience_years_min":7,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Apple Macbook"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","DevSecOps","Education","E-learning"],"lifecycle":[{"event":"open","at":"2026-10-08T22:25:03Z"}],"visa":[],"liveness":{"score":53,"band":"ok","label":"Likely open","p_open":0.85,"p_active":0.828,"p_room":0.75,"age_days":29,"expected_fill_days":35,"reasons":["seen:29","urgency","win:late"],"computed_at":"2026-10-10T05:45:15Z"},"pay":null,"html_url":"https://alion.io/job/faria-lead-application-securitydevsecops-engineer","json_url":"https://alion.io/job/faria-lead-application-securitydevsecops-engineer.json","meta":{"generated_at":"2026-10-11T03:30:16Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler","counted_by":"address","units_charged":1,"used_today":1206,"day_limit":5000,"remaining_today":3794,"minute_limit":60,"resets_at":"2026-10-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1902094},"rest":"https://alion.io/mcp/rest/get_company?id=1902094"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ffaria-lead-application-securitydevsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ffaria-lead-application-securitydevsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ffaria-lead-application-securitydevsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/faria-lead-application-securitydevsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ffaria-lead-application-securitydevsecops-engineer"}]}