Lead Application Security/DevSecOps Engineer

Faria is a leader in international education systems & services, offering an integrated suite across learning, admissions, school-to-home, and online courses — trusted by10,000+ schools and 4 million students across 155 countries. Our product family includesManageBac(curriculum, assessment & reporting for international schools),OpenApply(admissions management & CRM, used by 600+ leading international and independent schools),SchoolsBuddy(co-curricular & activity management), andVectare(school transport management). We are looking for a Lead Security/DevSecOps Engineer on the Product Engineering team, with a great opportunity to be self-directed and level up security practices and capabilities. We expect this to be a hands-on leadership role with a potential opportunity to build/upskill a small team. The person will report to the VP of Engineering and work in partnership with the vCISO, DevOps team, and engineering teams. Key Responsibilities Do an initial deep-dive assessment and evaluation to drive risk-based prioritisation of the following responsibilities Stand up and own the application security program across all five products — this is effectively greenfield. Define and embed a secure SDLC (shift-left): security requirements, design reviews, guardrails, and coding standards for an AI engineering reality. Select, deploy, and operationalise AppSec tooling (SAST, DAST, SCA/dependency and secrets scanning) integrated into CI/CD. Implement and operationalise