Head of Application and Product Security

May 14

Apply Now

Receive Emails with Similar Jobs

Bumble Inc.

WebsiteLinkedInAll Job Openings

Our mission is to create a world where all relationships are healthy and equitable, through Kind Connections.

501 - 1000

Description

• Responsible for the continuous development of an advanced secure SDLC framework, incorporating automation, machine learning, and contextual threat analysis. • Ensure that any software developed and/or deployed meets the high standards expected to ensure the security and privacy of our customers. • Enhance Bumble Inc.’s mobile and web application defences using the latest techniques in software composition, static and dynamic testing and threat modelling for systems written in Kotlin, Swift, PHP, Go and C. • Conduct sophisticated security assessments and penetration testing to preemptively identify and mitigate potential threats. • Lead and expand the application and product security team, fostering a culture of continuous learning and innovation in security practices. • Collaborate extensively with our Trust & Safety area (including Product, Technical, Legal, Ops, and Policy) to develop technologies and processes that safeguard user interactions and data privacy across all platforms. • Regularly update and present to senior management on security posture and product incident response. • Own key metrics around product security incidents, and risk trends in the codebase. • Supervise the application security efforts across the software engineering teams, providing technical guidance, and manage the application security budget and drive a security-first approach to software development and delivery. • Promote active, continuous learning and improvement within your team. Cultivate team members’ growth through feedback, coaching, and career development. • Manage multiple concurrent projects while effectively solving problems that cross product boundaries. • Establish strong partnerships and champion quality throughout a cross-functional organization to support the best possible security and engineering outcomes. • Support developer productivity, through training, driving solutions and tooling.

Requirements

• Bachelor’s degree in Computer Science or related technical field; or relevant certifications such as OSCP, or equivalent publicly verifiable practical experience. • Demonstrated experience in managing application security in high-stakes environments, preferably with exposure to both consumer and enterprise applications. • Deep technical expertise in modern mobile app security, legacy and modern application architectures (e.g., microservices, containerization). • A strong understanding of social engineering and other user-centred attack vectors. • A track record of successful collaboration with trust and safety teams is a strong plus. • Strong expertise in software engineering best practices. • Experience in managing highly skilled application security assessors or engineers. • Strong written and verbal communication skills, with high attention to detail.

Benefits

• Growth • Kindness • Equity • Accountability • Honesty