SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Cyera is building the security operating model for the age of AI, helping enterprises accelerate AI adoption while securing data, access, and models across human, system, and AI interactions. The company works with Fortune 1000 customers and is backed by leading investors.
You will own product security end-to-end as Application Security Lead, reporting to Infrastructure leadership and serving all of R&D while partnering closely with the Security organization, Product, and Engineering leadership. This is a technical leadership role with a mandate to build the function and team around you, starting hands-on.
Key responsibilities include:
- Own Cyera's security posture and be the trusted authority answering "how secure is our product?" with evidence for R&D leadership, the Security organization, and customers
- Lead continuous adversarial validation of code, infrastructure, and architecture, confirming strength of authorization, tenant isolation, business logic, and all paths to sensitive data
- Maintain a living map of attack surface and sensitive data flows, focusing assurance effort where stakes are highest
- Run threat modeling and security architecture review for new services, integrations, cloud connectors, and multi-tenant components early in design
- Own multi-tenancy and customer data boundaries: tenant isolation, authorization logic, secrets and key handling, and controls ensuring customer data remains unreachable from others
- Secure AI and agentic surfaces including prompt injection, tool and agent authorization, and model/data boundaries for autonomous systems
- Lead red team exercises across production and pre-production environments; run internal bug bounty program
- Define risk management standards, severity models, security gates, and exception processes for development and production environments
- Build secure development practices: secure-by-default patterns, guardrails, SAST/DAST/SCA tuned for signal, secrets detection, and security champions network across R&D
- Scale assurance through automation and self-service rather than headcount
- Keep engineering organization exercised and incident-ready through tabletop drills, detection coverage, forensics, escalation paths, and runbooks
- Represent product security externally in customer security reviews, questionnaires, third-party penetration tests, and CISO conversations
Requirements: Not explicitly stated in the posting.
