{"id":3156828,"url":"https://alion.io/job/surfshark-application-security-lead","title":"Application Security Lead","company":{"id":5244,"name":"Surfshark","domain":"surfshark.com","url":"https://alion.io/company/surfshark","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Vilnius, Lithuania","Kaunas, Lithuania"],"countries":["LT"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":6500,"max":8000,"currency":"EUR","period":"month","gross":true,"usd_annual":107676},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVSS","optional":false},{"name":"CWE","optional":false},{"name":"LLM","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"Threat Modeling","optional":false}],"status":"live","first_seen_at":"2026-10-23T10:27:52Z","employer_posted_date":"2026-10-23","last_verified_at":"2026-10-24T07:26:10Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Security shouldn't be the team that says no. At Surfshark, we want it to be the team that makes shipping fast and safe feel like the same thing. We're looking for an Application Security Team Lead to build and grow our global Application Security program: someone who leads a strong team, sets the standard for secure software design, and turns security into something engineers actually want to work with. Less bottleneck, more enabler.\nIf you want to:\nBuild, lead, and mentor a security engineering team, and set the AppSec strategy and roadmap;\n\nDefine secure-by-default patterns and paved-road guardrails so developers ship rapidly and safely;\n\nRun threat modeling for critical services and high-risk features, and turn findings into clear engineering work;\n\nBuild and grow a company-wide Security Champions program across distributed squads;\n\nSet vulnerability management standards, risk-scoring, and remediation SLAs, and tune detection tooling for high signal and low noise;\n\nOwn software supply chain security: dependency risk, SBOMs, pipeline integrity, and artifact signing;\n\nDefine security baselines for AI and LLM deployments, and set the rules for how engineers use AI-generated code;\n\nCollaborate with SecOps, GRC, Products Engineering teams and other teams to ensure Applications security.\n\nAnd you can check off:\nProven experience in Application Security, DevSecOps, or security-focused software engineering;\n\nProven experience leading or formally mentoring a team of security engineers;\n\nA track record of building and scaling an AppSec program, not just running third-party tools;\n\nStrong command of AppSec fundamentals: SSDLC,OWASP, CWE, CVSS, modern cryptography, and secure architecture;\n\nDeep expertise in either Application Security or Cloud Workload Security, with solid working knowledge of the other;\n\nHands-on experience integrating and tuning pipeline security tools (SAST, SCA, DAST, secrets and IaC scanning);\n\nWorking knowledge of software supply chain and AI/LLM security (OWASP Top 10 for LLMs);\n\nScripting skills (Python, Bash, PowerShell, or Go) and experience with Infrastructure as Code.\n\nHere’s the deal:\nGrowth and learning opportunities: time dedicated to learning, conferences, online learning platforms, and books for your professional development;\n\nHealth and wellness: we want you to feel and be your best. That's why we offer various benefits, from online workouts and a physical coach to health insurance and regular mental health checks;\n\nTools of your choice: choose the technical equipment and tools you need to do your best work;\n\nCommunity and celebrations: get ready for long-lasting traditions such as yearly workation, Friday get-togethers, various team buildings and company celebrations;\n\nWork-life balance: We encourage working in the office, with the possibility of up to two remote days per week. Plus, with our WFA policy, you can work from almost anywhere in the world;\n\nMore days off: additional vacation days depending on your tenure;\n\nPremium Surfshark accounts: for you, your family, and friends;\n\nGross salary: 6500 - 8000 Eur/month. Although it may vary depending on your skills and experience.","description_format":"text","description_chars":3162,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Health insurance","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","VPN & Proxy Services","Internet Security Services"],"lifecycle":[{"event":"open","at":"2026-10-23T14:49:06Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":0,"expected_fill_days":42,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":107676,"is_top_pay":false},"html_url":"https://alion.io/job/surfshark-application-security-lead","json_url":"https://alion.io/job/surfshark-application-security-lead.json","meta":{"generated_at":"2026-10-24T09:44:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14145,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5244},"rest":"https://alion.io/mcp/rest/get_company?id=5244"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsurfshark-application-security-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsurfshark-application-security-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsurfshark-application-security-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/surfshark-application-security-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsurfshark-application-security-lead"}]}