Role Overview
Daskalos is seeking a Security Lead to drive hands-on security across applications, cloud infrastructure and operations. This is a remote role for someone with 8-10 years of practical experience in Application Security, Cloud Security, Dev Sec Ops and Sec Ops. We’re looking for candidates who thrive in startup environments and want to make a real impact in securing education platforms. Prior experience with bug bounty programs or vulnerability research is a strong plus.
Key Responsibilities
- Perform application security reviews, threat modeling and secure coding assessments
- Implement and maintain Dev Sec Ops pipelines to embed security into CI / CD workflows
- Configure and monitor cloud security controls including IAM, network security and compliance
- Conduct vulnerability assessments, penetration testing and bug bounty triage
- Manage incident response and Sec Ops processes including detection, monitoring and remediation
- Work closely with engineering teams to fix vulnerabilities and improve overall security posture
- Contribute to security awareness by sharing best practices and training developers
Requirements
8-10 years of hands-on security experience in App Sec, Cloud Security, Dev Sec Ops and Sec OpsProven track record in startup or fast-paced environments.Strong knowledge of OWASP Top 10, MITRE ATT&CK, threat modeling and secure SDLCExperience with bug bounty programs, penetration testing or vulnerability disclosure.Familiarity with security tools (SAST, DAST, SIEM, XDR, container security, Ia C scanning)Clear communication skills to collaborate with engineers and stakeholdersGood to Have
Certifications (OSCP, OSCE, CCSP)Exposure to leading security practices in early-stage companies