Head of Application Security (Player Coach)

I’m looking for an application security leader who still enjoys being close to engineering. Someone who genuinely enjoys threat modelling, secure design, reviewing architecture, helping developers solve difficult security problems and improving software rather than simply policing it. This is a rare opportunity to join one of the world’s most technically respected engineering organisations in a genuine player-coach capacity. You’ll lead a highly capable team while remaining technically involved in secure software engineering, product security, threat modelling, architecture reviews, software supply chain security and secure development practices across complex distributed systems. Technical credibility matters here. The engineers you’ll work alongside expect thoughtful technical discussions, not governance from a distance. Successful candidates often come from organisations such as Google, Apple, Meta, Netflix, Amazon, Okta, CrowdStrike, Wiz, Microsoft, Datadog, Stripe or other engineering-first software companies. If you’re still happiest discussing architecture with engineers and solving difficult technical problems, I’d love to have a conversation.

Responsibilities

Lead a highly capable team; Remain technically involved in secure software engineering; Product security; Threat modelling; Architecture reviews; Software supply chain security; Secure development practices across complex distributed systems

Requirements

Application security leader who enjoys being close to engineering; Genuinely enjoys threat modelling; Secure design; Reviewing architecture; Helping developers solve difficult security problems; Improving software rather than simply policing it; Technical credibility; Ability to engage in thoughtful technical discussions with engineers; Experience across complex distributed systems

Nice to have

Experience at engineering-first software companies (e.g., Google, Apple, Meta, Netflix, Amazon, Okta, CrowdStrike, Wiz, Microsoft, Datadog, Stripe)