Head of Security

SUMMARY:
-

POSITION INFO:

My Exclusive Client is a leading integration and automation platform built on the .NET stack, empowering businesses to connect systems and streamline operations. We’re committed to building secure, resilient software and are seeking a visionary Head of Security who combines deep engineering expertise with cutting-edge AI-driven security practices.

Role Overview

We are seeking a Head of Security who operates like an ethical hacker and software engineer in equal measure. This is a hands-on, dedicated role focused on proactively finding vulnerabilities, securing operational controls, and building AI-augmented security solutions within our .NET codebase.

You will work primarily at the application layer, identifying attack surface points across the app and broader Microsoft Azure stack, and designing/software-engineering solutions to fix them. You’ll leverage AI effectively—prompting it correctly to detect issues, generate secure code, and automate vulnerability discovery.

This is not a purely managerial role. You will write code, build security tooling, and engineer solutions directly into My Exclusive Client’s platforms.

Key Responsibilities

1. AI-Driven Vulnerability Discovery

Use AI tools and large language models (LLMs) to systematically scan, analyze, and identify vulnerabilities in our .NET codebase
Craft precise prompts and develop AI-assisted workflows to detect security flaws, insecure patterns, and logical loopholes
Build internal AI-powered security scanners and automation tools

2. Ethical Hacking & Code-Level Security

Act as an ethical hacker within the codebase: perform deep code reviews, penetration testing, and exploit simulation
Identify security loopholes at the proxy layer, network layer, and infrastructure layer (not just application-level)
Map and analyze attack surface points across the Microsoft security stack (Azure, Entra ID, Defender, Sentinel, Key Vault, etc.)

3. Solution Engineering

Build software solutions (tools, patches, hardening frameworks) in .NET to remediate identified vulnerabilities
Design and implement operational security controls that are sustainable, automated, and measurable
Engineer secure-by-default patterns into My Exclusive Client’s development lifecycle

4. Operational Controls & Security Strategy

Maintain and extend compliance certifications (e.g. SOC 2 Type II) by defining and enforcing security operational controls across development, deployment, and runtime environments
Conduct risk assessments and threat modeling focused on application, API gateways, and Microsoft Azure infrastructure
Develop incident response playbooks and proactive defense mechanisms

5. Collaboration & Culture

Work closely with engineering teams to embed security into the SDLC
Foster a “peaceful,” proactive security culture focused on discovery and prevention rather than blame
Mentor developers on secure coding practices, AI-augmented security, and .NET security patterns

Required Qualifications

Technical Skills

• 5+ years in security engineering, ethical hacking, or application security
• 3+ years as a software engineer with strong expertise in the .NET stack (C#, ASP.NET Core, Entity Framework)
• Deep hands-on experience with API gateways, reverse proxies, and general network security
• Proven ability to use AI/LLMs for security: prompt engineering, automated code analysis, vulnerability generation/detection
• Experience building security tooling, scanners, or automation frameworks

Certifications (Preferred but not mandatory)

• OSCP, OSCE, or CEH (ethical hacking)
• Microsoft certifications: AZ-500 (Security Engineer), SC-900/200
• CSSLP, CISSP, or CISM (security leadership)

Soft Skills

• Exceptional problem-solver with a calm, methodical, and peaceful mindset
• Strong communication skills to translate technical risks into actionable engineering tasks
• Self-starter who thrives in autonomy and takes ownership of security outcomes

What You’ll Build

• Detect and patch application-layer vulns, working with the R & D team
• Develop, test and review appropriate configuration for infrastructure
• Custom security tooling integrating AI prompts, .NET code analysis, and Microsoft stack hardening
• A proactive security culture where vulnerability discovery is celebrated, not punished

What We Offer

• A dedicated, focused role with minimal bureaucracy and maximum impact
• Opportunity to pioneer AI-driven security engineering in a real-world .NET platform
• Competitive salary + benefits
• Continuous learning budget (confidence in AI, security conferences, certifications)
• Trust-based culture focused on building and preventing, not reacting