Team Lead - Application Security (Remote)

About the Role

Join us as a Team Lead - Application Security in our AppSec team and help shape the future of autonomous mobility! This Team Lead - Application Security remote position is part of MOIA's Platform Engineering organization, contributing directly to our secure-by-design approach. We operate as a service provider and partner to engineering teams, helping establish security best practices and guardrails across the development lifecycle.

What You'll Do

• Lead and drive MOIA's cloud-based security projects and programs in their implementation, ensuring compliance with relevant standards and maintaining a strong security posture across the organization.
• Support certification initiatives such as ISO 27001 and TISAX, preparing documentation and enabling audit activities for successful readiness.
• Identify security gaps and risks, align with internal teams to define remediation actions, and continuously improve our security controls and processes.
• Collaborate closely with Digital Workplace/IT, engineering, and compliance teams to integrate security principles into cloud and software development workflows.
• Partner with external consultants for penetration tests, audits, and continuous improvement of cloud and application security.
• Lead and establish Security Monitoring activities, ensuring a good proactive posture, proper incident response and investigation, as well as derived hardening measures.
• Shape MOIA's strategic Cloud Cybersecurity roadmap and align it with Vehicle Cybersecurity initiatives, as well as with other teams with a stake in cybersecurity.
• Promote secure and responsible use of AI across development workflows, enabling teams to innovate safely and confidently.

Requirements

• Proven experience in leading teams or people within cybersecurity or related technology domains, fostering collaboration and accountability.
• Understanding of information security frameworks (e.g., ISO 27001, TISAX, NIS2) and hands-on experience with audits and/or certifications.
• Strong expertise in cloud security (AWS or GCP), combined with a strategic mindset to align cloud and vehicle cybersecurity domains.
• Practical experience in security operations, including incident handling and response management.
• Familiarity with AI technologies and enthusiasm for enabling secure AI adoption within development and operational teams.
• Excellent communication and stakeholder management skills, both with internal teams and external partners.
• Ability to balance strategic thinking with hands-on implementation in a fast-moving, cross-functional environment.
• A continuous improvement mindset and a passion for building sustainable, secure, and innovative mobility solutions.

Nice to Have

• Good knowledge of application security frameworks and methodologies (e.g. OWASP Top 10, OWASP SAMM).
• Ability to communicate fluently and effectively in English (must have) and German (nice to have).

What We Offer

• Competitive salary (including bonus) for this Team Lead - Application Security remote role.
• Hybrid work setup: Work from home or one of our offices - you and your team decide how often to meet, blending flexibility with collaboration!
• Flexible working hours and the possibility of flexible work arrangements depending on your needs.
• Budget and monthly expense allowance for home office setup.
• Possibility of remote work from outside Germany for up to 6 weeks per year from over 35 countries.
• Public transport ticket (fully subsidized "Deutschlandticket") for commuting and travelling throughout Germany.
• Subsidized fitness club membership or bike leasing.
• Mental health support, 1:1 sessions with external professionals and mental unload workshops.
• 30 vacation days, sabbatical and unpaid leave option.
• Relocation support with service provider (visa, administration, etc.).