Application Security Team Lead

About Monday.com monday.com is the AI work platform powering the most ambitious teams. 250,000+ customers across departments use us to bring people, workflows, and AI agents together on one flexible platform where AI doesn't just assist, it executes. We move fast, build things that matter, and foster an ownership-driven culture where you're empowered to shape how organizations work and outpace their competition. As our Application Security Team Lead, you will lead a team of talented security engineers, collaborating closely with Product, R&D and Internal Technology to embed security across every phase of the software development lifecycle (SDLC), CI/CD Security and Application Runtime Security in the era of agentic developer tools and environment. You will own the planning and execution of our global AppSec program, work with executives on strategic initiatives and drive a "secure-by-design" culture to ensure our agile deployment cycles never compromise on security. Strategic Leadership & Collaboration • Meet and engage with technical leaders within monday for fostering a culture of security ownership across R&D and providing visibility to risks across different teams • Define and execute a scalable application security roadmap aligned with monday.com’s rapid growth. • Work with the leadership team of the Security department on collaboration, shared projects and support for the culture within the department Technical & Operational Oversight • Familiarity with utilization of AI in the development pipeline and overall application security risks in the AI stack • Seamlessly integrate automated security testing (SAST, SCA, Secrets) into CI/CD pipelines. • Lead the methodology for threat modeling sessions and architectural reviews for major platform changes, new features, and infrastructure updates. • Oversee our bug bounty program, penetration testing, and internal vulnerability disclosures, ensuring timely, risk-based remediation. • Partner with Governance, Risk, and Compliance (GRC) to ensure application compliance with application security related security controls as part of known frameworks (OWASP Top 10, ISO27001, SOC2, etc.) People & Culture • Mentor, scale, and inspire a high-performing team of AppSec engineers; encourage continuous learning and innovation. • Act as a trusted advisor to product managers and engineering leads, balancing risk mitigation with business agility. • Contribute to the branding and positioning of the Security department.