Security Product and Application Development Lead

Requirements

• You come from Product Engineering or SRE / platform work, and you know the SDLC from the inside
• You’re good at finding consensus and bringing people along, rather than ordering them around. In Product Security, impact often depends on the ability to influence without formal authority and to drive change through trust, credibility, and alignment
• You are excited to help shape and carry a strong vision for product and application security, especially as AI reshapes how products are built and secured
• You’re comfortable with service management: organizing interrupts, running on-call rotations, keeping the team’s signal-to-noise healthy
• You have a strong sense of ethics - you’ll frequently have access to sensitive information
• Security expertise is a plus, not a requirement. Curiosity and motivation will take you far, and you’ll learn a lot from your future (genuinely excellent) teammates

What the job involves

• Application and Product Security covers the products Criteo builds for customers, partners, and internal users - every digital asset tied to what we sell - and the security of how those products are built (the Secure SDLC)
• The team partners with all Product Engineering groups (Technology Group, Performance Media, Retail Media), works regularly with the Factory group, and collaborates with the other Security Domains to raise the company’s overall posture
• Own the Application and Product Security roadmap, in collaboration with your main partners (Product Engineering, the Factory group, the other Security Domains)
• Run priority and risk management for the team: we see a lot of vulnerabilities - your job is to stay calm, triage, and organize a clear response
• Contribute personally to the execution of the roadmap. This is a hands-on role
• Define, maintain, and evolve the security KPIs for your domain
• Plug your team into the wider security ecosystem - contributing to shared tooling and platforms, and influencing the direction of other Security Domains
• Proudly contribute to the improvement of the security posture of the company
• Manage and grow a team of 4 engineers, support career development, mentoring, and hiring. Foster a strong engineering culture focused on quality and collaboration