Team Lead - Application Security Team (all genders)

Join us as a Team Lead - Application Security Team (all genders) in our AppSec team and help shape the future of autonomous mobility!

The Application Security (AppSec) team is part of MOIA’s Platform Engineering organization and contributes directly to our secure-by-design approach. We operate as a service provider and partner to engineering teams, helping establish security best practices and guardrails across the development lifecycle. 

Our scope includes areas such as cloud security posture management, CI/CD hardening, threat modelling, compliance automation, incident response, and tool development to support other teams. We also create and maintain reusable security components and templates, like scanning boilerplates, and collaborate on topics such as security configuration policies and network protection mechanisms. 

The team has an international background and is based in Hamburg and Berlin. We value a hands-on, builder-oriented culture while integrating selected third-party tools where they add value. As a young and growing team, we emphasize practical learning — for example, by running Capture-the-Flag exercises or similar challenges to keep our skills sharp. 

What you will do

• Lead and drive MOIA’s cloud-based security projects and programs in their implementation, ensuring compliance with relevant standards and maintaining a strong security posture across the organization. 

• Support certification initiatives such as ISO 27001 and TISAX, preparing documentation and enabling audit activities for successful readiness. 

• Identify security gaps and risks, align with internal teams to define remediation actions, and continuously improve our security controls and processes. 

• Collaborate closely with Digital Workplace/IT, engineering, and compliance teams to integrate security principles into cloud and software development workflows. 

• Partner with external consultants for penetration tests, audits, and continuous improvement of cloud and application security. 

• Lead and establish Security Monitoring activities, ensuring a good proactive posture, proper incident response and investigation, as well as derived hardening measures. 

• Shape MOIA’s strategic Cloud Cybersecurity roadmap and align it with Vehicle Cybersecurity initiatives, as well as with other teams with a stake in cybersecurity. 

• Promote secure and responsible use of AI across development workflows, enabling teams to innovate safely and confidently. 

• Enable and support the use of code scanning, SBOM, compliance-as-code, identity-as-code, and similar security and compliance solutions across the organisation.

What will help you to fulfill your role 

• Proven experience in leading teams or people within cybersecurity or related technology domains, fostering collaboration and accountability. 

• Understanding of information security frameworks (e.g., ISO 27001, TISAX, NIS2) and hands-on experience with audits and/or certifications 

• Strong expertise in cloud security (AWS or GCP), combined with a strategic mindset to align cloud and vehicle cybersecurity domains. 

• Practical experience in security operations, including incident handling and response management. 

• Familiarity with AI technologies and enthusiasm for enabling secure AI adoption within development and operational teams. 

• Excellent communication and stakeholder management skills, both with internal teams and external partners. 

• Ability to balance strategic thinking with hands-on implementation in a fast-moving, cross-functional environment. 

• A continuous improvement mindset and a passion for building sustainable, secure, and innovative mobility solutions. 

• Good knowledge of application security frameworks and methodologies (e.g. OWASP Top 10, OWASP SAMM). 

• Ability to communicate fluently and effect