Role Overview
Daskalos is seeking a Security Lead to drive hands-on security across applications, cloud infrastructure and operations. This is a remote role for someone with 8-10 years of practical experience in Application Security, Cloud Security, DevSecOps and SecOps. We’re looking for candidates who thrive in startup environments and want to make a real impact in securing education platforms. Prior experience with bug bounty programs or vulnerability research is a strong plus.
Key Responsibilities
- Perform application security reviews, threat modeling and secure coding assessments
- Implement and maintain DevSecOps pipelines to embed security into CI / CD workflows
- Configure and monitor cloud security controls including IAM, network security and compliance
- Conduct vulnerability assessments, penetration testing and bug bounty triage
- Manage incident response and SecOps processes including detection, monitoring and remediation
- Work closely with engineering teams to fix vulnerabilities and improve overall security posture
- Contribute to security awareness by sharing best practices and training developers
Requirements
8-10 years of hands-on security experience in AppSec, Cloud Security, DevSecOps and SecOpsProven track record in startup or fast-paced environments.Strong knowledge of OWASP Top 10, MITRE ATT&CK, threat modeling and secure SDLCExperience with bug bounty programs, penetration testing or vulnerability disclosure.Familiarity with security tools (SAST, DAST, SIEM, XDR, container security, IaC scanning)Clear communication skills to collaborate with engineers and stakeholdersGood to Have
Certifications (OSCP, OSCE, CCSP)Exposure to leading security practices in early-stage companies