Director, Application Security

webAI•Austin, TX

35d

About The Position

We are searching for a Director of Application Security to lead company-wide application and product security initiatives. We are not looking for a traditional security leader focused on oversight or compliance. Instead, you will operate at the intersection of deep technical design and product strategy, with true ownership of security outcomes. If the ability and enablement to shape an emerging category at the intersection of AI, privacy and distributed computing invigorates you, this foundational opportunity is your calling.

Requirements

12+ years of experience in a professional, technical cybersecurity capacity
5+ years of experience in technical cybersecurity leadership roles
Foundational secure software development experience is a big plus
Deep background in product and platform security, beyond enterprise IT security
Experience with cloud infrastructure, distributed systems, and modern architectures
Strong understanding of distributed systems, edge computing, application / infrastructure security and adversarial thinking
Depth with AI/ML security (e.g., model integrity, data poisoning, adversarial attacks)
Deep technical literacy and ability to coach others on delivery best practices
Strong communication skills—able to navigate technical and non-technical discussions
Highly adaptable and comfortable working with evolving processes and priorities
Ability to work with imperfect systems and incrementally improve them over time rather than striving for immediate perfection

Nice To Haves

Any of CISSP, CSSLP, OSWE, GAIPS, etc

Responsibilities

Establish the security model for decentralized, on-device AI systems as well as enterprise technology
Define trust boundaries, identity frameworks, and data protection strategies
Lead threat modeling for edge, distributed, and AI-driven environments
Promote a culture to ensure security is embedded into system design, not layered on
Integrate security into the software and ML lifecycle (SDLC + MLOps)
Define safeguards and validation measures for model integrity, adversarial attacks, data poisoning, and emergent AI/ML threats
Partner with engineering to build secure-by-default product capabilities
Make security a core product feature, not just an internal function
Own security across cloud, hybrid, and edge/on-device environments
Establish controls to protect confidentiality, integrity, availability, and privacy for data, identity, access, networking, and distributed systems
Secure deployments, firmware, and update mechanisms across all deployment models (device-level, on-premises, cloud, hybrid)
Develop, operate, and maintain a cybersecurity risk assessment and vulnerability management program
Mitigate supply chain and third-party risks and vulnerabilities