Head of Security

About the role

The client is a leading integration and automation platform built on the .NET stack, seeking a visionary Head of Security to drive AI‑augmented security engineering. This hands‑on role combines ethical hacking, secure code development, and strategic security operations.

Key responsibilities

• Use AI tools and large language models to scan, analyze and detect vulnerabilities in the .NET codebase, building internal AI‑powered security scanners.
• Perform ethical hacking, deep code reviews, penetration testing and exploit simulation across application, proxy, network and Azure layers.
• Engineer .NET‑based security tools, patches and hardening frameworks, embedding secure‑by‑default patterns into the development lifecycle.
• Maintain and extend compliance certifications (e.g., SOC 2 Type II) by defining operational controls, risk assessments and incident response playbooks.
• Collaborate with engineering teams to embed security into the SDLC, mentor developers and foster a proactive security culture.

Required profile

• 5+ years in security engineering, ethical hacking or application security.
• 3+ years as a software engineer with strong expertise in the .NET stack (C#, ASP.NET Core, Entity Framework).
• Hands‑on experience with API gateways, reverse proxies and network security.
• Proven ability to use AI/LLMs for security tasks such as prompt engineering and automated code analysis.
• Preferred certifications: OSCP, OSCE, CEH, AZ‑500, CSSLP, CISSP or CISM.

Required skills

• .NET development (C#, ASP.NET Core, Entity Framework)
• API gateway and reverse proxy security
• Network security fundamentals
• Microsoft Azure services (Azure, Entra ID, Defender, Sentinel, Key Vault)
• AI/LLM prompt engineering and automated vulnerability detection
• Security tooling and scanner development

What we offer

• Dedicated, high‑impact role with minimal bureaucracy
• Opportunity to pioneer AI‑driven security engineering on a real‑world .NET platform
• Competitive salary and benefits
• Continuous learning budget for AI, security conferences and certifications
• Trust‑based culture focused on building and preventing