About Iru
Iru is the AI-powered security & IT platform used by the world’s fastest-growing companies to secure their users, apps, and devices. Built for the AI era, Iru unifies identity & access, endpoint security & management, and compliance automation—collapsing the stack and giving IT & security time and control back.
Iru is backed by some of the smartest investors in tech—General Catalyst, Tiger Global, Felicis, Greycroft, and First Round Capital. In July 2024, Iru raised $100 million from General Catalyst, valuing the company at $850 million. Customers include Notion, Cursor, Lovable, Replit, and Mercor, and Iru partners with industry leaders such as ServiceNow and AWS. Iru was named to Forbes’ America’s Best Startup Employers 2025 list for employee engagement and satisfaction. About Iru
Iru is the AI-powered security & IT platform used by the world’s fastest-growing companies to secure their users, apps, and devices. Built for the AI era, Iru unifies identity & access, endpoint security & management, and compliance automation—collapsing the stack and giving IT & security time and control back.
Iru is backed by some of the smartest investors in tech—General Catalyst, Tiger Global, Felicis, Greycroft, and First Round Capital. In July 2024, Iru raised $100 million from General Catalyst, valuing the company at $850 million. Customers include Notion, Cursor, Lovable, Replit, and Mercor, and Iru partners with industry leaders such as ServiceNow and AWS. Iru was named to Forbes’ America’s Best Startup Employers 2025 list for employee engagement and satisfaction.
Competitive salary Hybrid work environment (3 days in office per week) 100% individual and dependent medical + dental + vision coverage401(K) with a 4% company match20 days PTOIru Wellness Week the first week in JulyEquity for full-time employeesIn-office lunch stipend provided Up to 16 weeks of paid leave for new parentsPaid Family and Medical LeaveModern Health mental health benefits for individuals and dependentsFertility benefitsWorking Advantage employee discountsOnsite fitness centerFree parkingExciting opportunities for career growth
We are excited to be serving a significant need for a fast-growing market, and are proud of the high-performing team we have brought together so far. If you’re someone who wants to engage in new, exciting projects that will challenge your skills in the best way possible, we would love to connect with you.
At Iru, we believe in fostering an inclusive environment in which employees feel encouraged to share their unique perspectives, leverage their strengths, and act authentically. We know that diverse teams are strong teams, and welcome those from all backgrounds and varying experiences.
Iru is proud to be an equal opportunity employer committed to diversity and inclusion in the workplace. Qualified applicants will be considered for employment without regard to race, color, religion, national origin, age, sex, sexual orientation, gender identity, physical or mental disability, protected veteran or military status or any other status protected by applicable law. #LI-Hybrid
Iru is the AI-powered security & IT platform used by the world’s fastest-growing companies to secure their users, apps, and devices. Built for the AI era, Iru unifies identity & access, endpoint security & management, and compliance automation—collapsing the stack and giving IT & security time and control back.
Iru is backed by some of the smartest investors in tech—General Catalyst, Tiger Global, Felicis, Greycroft, and First Round Capital. In July 2024, Iru raised $100 million from General Catalyst, valuing the company at $850 million. Customers include Notion, Cursor, Lovable, Replit, and Mercor, and Iru partners with industry leaders such as ServiceNow and AWS. Iru was named to Forbes’ America’s Best Startup Employers 2025 list for employee engagement and satisfaction. About Iru
Iru is the AI-powered security & IT platform used by the world’s fastest-growing companies to secure their users, apps, and devices. Built for the AI era, Iru unifies identity & access, endpoint security & management, and compliance automation—collapsing the stack and giving IT & security time and control back.
Iru is backed by some of the smartest investors in tech—General Catalyst, Tiger Global, Felicis, Greycroft, and First Round Capital. In July 2024, Iru raised $100 million from General Catalyst, valuing the company at $850 million. Customers include Notion, Cursor, Lovable, Replit, and Mercor, and Iru partners with industry leaders such as ServiceNow and AWS. Iru was named to Forbes’ America’s Best Startup Employers 2025 list for employee engagement and satisfaction.
The Opportunity
Iru is seeking an experienced and hands-on Application Security Lead / Manager to own and mature our Application Security program. This role will serve as the operational leader for AppSec, partnering closely with Engineering, Product, and Security leadership to ensure security is embedded throughout the software development lifecycle.
The ideal candidate combines strong technical application security expertise with the ability to influence engineering teams, drive remediation accountability, and scale security processes in a fast-moving environment.
This position is critical to strengthening our security posture, reducing risk, and enabling engineering teams to deliver secure products at speed.
The Opportunity
Iru is seeking an experienced and hands-on Application Security Lead / Manager to own and mature our Application Security program. This role will serve as the operational leader for AppSec, partnering closely with Engineering, Product, and Security leadership to ensure security is embedded throughout the software development lifecycle.
The ideal candidate combines strong technical application security expertise with the ability to influence engineering teams, drive remediation accountability, and scale security processes in a fast-moving environment.
This position is critical to strengthening our security posture, reducing risk, and enabling engineering teams to deliver secure products at speed.
Responsibilities
- Own and manage the Application Security program and secure software development lifecycle (SSDLC).
- Establish, maintain, and continuously improve application security standards, policies, and procedures.
- Ensure security requirements are integrated into engineering roadmaps and development processes.
- Conduct technical security reviews and application security assessments.
- Lead threat modeling initiatives across products and platforms.
- Identify architectural and design-level security risks and partner with engineering teams on mitigation strategies.
- Drive the end-to-end vulnerability management lifecycle for applications and services.
- Establish remediation priorities and accountability across engineering teams.
- Track, report, and improve vulnerability remediation performance and risk reduction metrics.
- Manage external penetration testing engagements and red team activities.
- Coordinate findings validation, remediation planning, and closure activities.
- Ensure testing results are translated into actionable security improvements.
- Oversee implementation and optimization of application security tooling, including:
- SAST
- DAST
- Software Composition Analysis (SCA)
- Secrets detection
- Infrastructure-as-Code scanning
- Integrate security controls and automated testing into CI/CD pipelines.
- Continuously improve security gates while maintaining developer productivity.
- Serve as the primary security partner to Engineering leadership.
- Drive security awareness and secure coding practices across development teams.
- Build scalable processes that enable engineers to identify and address security issues efficiently.
- Promote a culture of shared security ownership.
Application Security Program Ownership
Security Assessments & Threat Modeling
Vulnerability Management & Remediation
Penetration Testing & Offensive Security
Security Tooling & CI/CD Integration
Engineering Partnership & Enablement
Minimum Qualifications
- 7+ years of experience in Application Security, Product Security, or Security Engineering.
- Strong understanding of secure software development practices and modern application architectures.
- Experience performing threat modeling, security assessments, and code review activities.
- Hands-on experience with vulnerability management and remediation programs.
- Experience managing external penetration testing engagements.
- Deep familiarity with modern AppSec tooling and CI/CD security integration.
- Strong communication skills with the ability to influence engineering and product stakeholders.
Preferred Qualifications
- Experience leading or building AppSec programs in cloud-native environments.
- Knowledge of AWS, Azure, or GCP security best practices.
- Experience with DevSecOps methodologies and automation.
- Relevant security certifications such as CISSP, CSSLP, GWAPT, GWEB, or OSCP.
Success Metrics
- Reduction in critical and high-severity security vulnerabilities.
- Improved Mean Time to Remediation (MTTR).
- Increased developer adoption and engagement with security programs.
- Reduction in recurring security findings across products.
- Effectiveness and integrity of pull request security gates.
- Maturity and efficacy of security review pipelines.
- Successful integration of security requirements into engineering planning and delivery.
Success in this role will be measured by:
Competitive salary Hybrid work environment (3 days in office per week) 100% individual and dependent medical + dental + vision coverage401(K) with a 4% company match20 days PTOIru Wellness Week the first week in JulyEquity for full-time employeesIn-office lunch stipend provided Up to 16 weeks of paid leave for new parentsPaid Family and Medical LeaveModern Health mental health benefits for individuals and dependentsFertility benefitsWorking Advantage employee discountsOnsite fitness centerFree parkingExciting opportunities for career growth
We are excited to be serving a significant need for a fast-growing market, and are proud of the high-performing team we have brought together so far. If you’re someone who wants to engage in new, exciting projects that will challenge your skills in the best way possible, we would love to connect with you.
At Iru, we believe in fostering an inclusive environment in which employees feel encouraged to share their unique perspectives, leverage their strengths, and act authentically. We know that diverse teams are strong teams, and welcome those from all backgrounds and varying experiences.
Iru is proud to be an equal opportunity employer committed to diversity and inclusion in the workplace. Qualified applicants will be considered for employment without regard to race, color, religion, national origin, age, sex, sexual orientation, gender identity, physical or mental disability, protected veteran or military status or any other status protected by applicable law. #LI-Hybrid