Application Security Lead

Prolific is seeking an experienced security professional to own its application security strategy. The role involves defining and driving a Secure Software Development Lifecycle (SSDLC), embedding security across engineering, and providing hands‑on expertise through code review, threat modeling, and security testing. You will manage the Senior Application Security Engineer, oversee compliance programs, and lead cross‑functional initiatives with product, platform, data, TechOps, and legal teams.

Responsibilities

• Define and implement SSDLC for all product lines.
• Set standards for security integration in engineering workflows.
• Lead hands‑on code reviews, threat modeling, and security testing.
• Manage the Senior Application Security Engineer and mentor the team.
• Own and maintain the compliance program (ISO 27001, SOC 2).
• Collaborate with engineering leadership to balance risk ...