---
title: 'Application Security Lead at Surfshark'
canonical: 'https://feeny.ai/job/application-security-lead-surfshark-vilnius-p2jwbnbp2dqq'
type: 'job'
last_seen: '2026-10-24'
---

# Application Security Lead at Surfshark

- **Company:** Surfshark
- **Location:** Vilnius, Lithuania
- **Employment:** full-time
- **Work type:** onsite
- **Posted:** 2026-10-23
- **Last confirmed live:** 2026-10-24
- **Apply:** https://jobs.ashbyhq.com/surfshark/edff063a-6564-45fd-b431-1ad86f93ea61

## Job description

Security shouldn't be the team that says no. At Surfshark, we want it to be the team that makes shipping fast and safe feel like the same thing. We're looking for an Application Security Team Lead to build and grow our global Application Security program: someone who leads a strong team, sets the standard for secure software design, and turns security into something engineers actually want to work with. Less bottleneck, more enabler.

If you want to:

- Build, lead, and mentor a security engineering team, and set the AppSec strategy and roadmap;
- Define secure-by-default patterns and paved-road guardrails so developers ship rapidly and safely;
- Run threat modeling for critical services and high-risk features, and turn findings into clear engineering work;
- Build and grow a company-wide Security Champions program across distributed squads;
- Set vulnerability management standards, risk-scoring, and remediation SLAs, and tune detection tooling for high signal and low noise;
- Own software supply chain security: dependency risk, SBOMs, pipeline integrity, and artifact signing;
- Define security baselines for AI and LLM deployments, and set the rules for how engineers use AI-generated code;
- Collaborate with SecOps, GRC, Products Engineering teams and other teams to ensure Applications security.

And you can check off:

- Proven experience in Application Security, DevSecOps, or security-focused software engineering;
- Proven experience leading or formally mentoring a team of security engineers;
- A track record of building and scaling an AppSec program, not just running third-party tools;
- Strong command of AppSec fundamentals: SSDLC,OWASP, CWE, CVSS, modern cryptography, and secure architecture;
- Deep expertise in either Application Security or Cloud Workload Security, with solid working knowledge of the other;
- Hands-on experience integrating and tuning pipeline security tools (SAST, SCA, DAST, secrets and IaC scanning);
- Working knowledge of software supply chain and AI/LLM security (OWASP Top 10 for LLMs);
- Scripting skills (Python, Bash, PowerShell, or Go) and experience with Infrastructure as Code.

Here’s the deal:

- Growth and learning opportunities: time dedicated to learning, conferences, online learning platforms, and books for your professional development;
- Health and wellness: we want you to feel and be your best. That's why we offer various benefits, from online workouts and a physical coach to health insurance and regular mental health checks;
- Tools of your choice: choose the technical equipment and tools you need to do your best work;
- Community and celebrations: get ready for long-lasting traditions such as yearly workation, Friday get-togethers, various team buildings and company celebrations;
- Work-life balance: We encourage working in the office, with the possibility of up to two remote days per week. Plus, with our WFA policy, you can work from almost anywhere in the world;
- More days off: additional vacation days depending on your tenure;
- Premium Surfshark accounts: for you, your family, and friends;
- Gross salary: 6500 - 8000 Eur/month. Although it may vary depending on your skills and experience.

## About Surfshark

## Company Overview
- **One-liner**: Surfshark is a cybersecurity company that provides a suite of online privacy and security solutions, including a top-rated VPN, antivirus, and data removal tools.
- **Entity Type**: Private (Unicorn, merged under a holding company with Nord Security)
- **Headquarters**: Amsterdam, Netherlands (with offices in Vilnius & Kaunas, Lithuania; Warsaw, Poland; and Berlin, Germany)
- **Founded**: 2018
- **Founders**: Vytautas Kaziukonis

## Core Business
- **Primary industry/industries**: Cybersecurity, Consumer Privacy, VPN Services
- **Target customers**: B2C (individual consumers), with specific programs for journalists, activists, and NGOs
- **Mission or purpose statement**: "To empower people to take full control of their digital lives, raise awareness about evolving online threats, and champion the accessibility and future of the internet."

## Products & Services
For each major offering:
- **[Surfshark VPN](https://surfshark.com/vpn)**: Core virtual private network service, a top-3 global VPN. Includes features like a strict no-logs policy (verified by Deloitte), 100% RAM-only servers, the proprietary WireGuard protocol, and the FastTrack route optimizer.
- **[Surfshark Antivirus](https://surfshark.com/antivirus)**: Malware and virus protection software.
- **[Surfshark Alert](https://surfshark.com/alert)**: A personal data leak monitoring service that alerts users if their credentials are exposed.
- **[Surfshark Search](https://surfshark.com/search)**: A private, ad-free search engine.
- **[Alternative ID](https://surfshark.com/alternative-id)**: A tool to create a synthetic online identity to protect a user's real email and personal data.
- **[Alternative Number](https://surfshark.com/alternative-number)**: A virtual phone number service for enhanced privacy.
- **[Incogni](https://incogni.com/)**: An automated data removal service that forces data brokers to delete a user's personal information.
- **[HeyPolo](https://heypolo.com/)**: A location-sharing app focused on privacy and consent.

## Market Standing
- **Valuation**: $1.6 Billion (as of 2022 merger with Nord Security), making it a Lithuanian unicorn. [surfshark.com](https://surfshark.com/about-us)
- **Key Metric**: Over 40 million app downloads, 500+ employees. [surfshark.com](https://surfshark.com/about-us)
- **Notable Investors/Partners**: Merged with Nord Security (2022) under a single holding company. Partners include Amnesty International and the VPN Trust Initiative. [surfshark.com](https://surfshark.com/about-us)
- **Growth Signals**:
    - Ranked as one of the fastest-growing European companies by the Financial Times FT 1000 for 2024, 2025, and 2026. [surfshark.com](https://surfshark.com/about-us)
    - Awarded "Best of 2026" by PCMag and "Editors’ Choice 2026" by CNET. [surfshark.com](https://surfshark.com/about-us)
    - Received AV-TEST Certification for its antivirus in 2025. [surfshark.com](https://surfshark.com/about-us)

## Competitive Advantages
- **Integrated Security Suite**: Beyond a standard VPN, Surfshark offers a comprehensive ecosystem (antivirus, data removal, leak alerts) creating a strong switching cost for users.
- **Privacy-First, Verified Operations**: The company has a strict, independently audited no-logs policy (verified by Deloitte) and operates a 100% RAM-only server network, a strong trust signal in the privacy-focused market.
- **Rapid Growth & Brand Recognition**: Consistently ranked among the fastest-growing companies in Europe and holds "Best of" awards from major tech publications (PCMag, CNET), giving it strong market credibility.
- **Innovation & Open Source**: Developed Dausos, the first VPN protocol built specifically for VPN users, and maintains a public Research Hub on internet censorship and cyber threats. [surfshark.com](https://surfshark.com/about-us)

## Strategic Focus
- **Global Expansion & Product Diversification**: Continues to expand its suite of privacy products (e.g., launching HeyPolo, Incogni) to capture more of the user's digital life.
- **Advocacy and Trust**: Deepening its commitment to digital rights through partnerships (e.g., Amnesty International) and transparency initiatives (publishing annual reports, impact reports, and transparency reports).
- **Enterprise-Grade Scaling**: The 2022 merger with Nord Security created a cybersecurity powerhouse, allowing for shared infrastructure and resources while keeping brands independent.

## Why Work Here
- **Culture & Values**: Company culture is rated 4.2/5 on Glassdoor. Core principles include **Radical Ownership, Open-mindedness, Collaboration, and High Standards**. [glassdoor.com](https://www.glassdoor.com/Overview/Working-at-Surfshark-EI_IE6375899.11,20.htm)
- **Remote & Flexibility**: Offers a "work from anywhere" policy (up to five times a year globally), flexible office hours, and a hybrid work-from-office model. [surfshark.com](https://surfshark.com/career)
- **Perks & Growth**: Includes private health insurance, mental and physical wellbeing programs (yoga, gym access), access to online learning platforms (Udemy, Masterclass), and bonus days off. [surfshark.com](https://surfshark.com/career)
- **Team**: A dynamic, fast-growing environment with over 500 specialists across global offices in Vilnius, Kaunas, Warsaw, and Berlin. [surfshark.com](https://surfshark.com/about-us)
- **Mission-Driven**: Employees work on products used by millions, with a clear mission to protect digital freedom and fight censorship.

## Sources
1. [Surfshark - About Us](https://surfshark.com/about-us)
2. [Surfshark - Careers](https://surfshark.com/career)
3. [Surfshark on Glassdoor](https://www.glassdoor.com/Overview/Working-at-Surfshark-EI_IE6375899.11,20.htm)
4. [Surfshark on LinkedIn](https://pl.linkedin.com/company/surfshark)

## Other roles at Surfshark

- [Community Manager](https://feeny.ai/job/community-manager-surfshark-vilnius-dknj3zmwtfmg) — Vilnius, Lithuania
- [Junior Linux Sysadmin (content access)](https://feeny.ai/job/junior-linux-sysadmin-content-access-surfshark-vilnius-asqh5eyb83zp) — Vilnius, Lithuania
- [Talent Acquisition Partner](https://feeny.ai/job/talent-acquisition-partner-surfshark-vilnius-356bbr98ts8v) — Vilnius, Lithuania
- [Talent Acquisition Team Lead (Tech)](https://feeny.ai/job/talent-acquisition-team-lead-tech-surfshark-vilnius-zfjmnnez6h14) — Vilnius, Lithuania
- [Mid/Senior Data Scientist](https://feeny.ai/job/mid-senior-data-scientist-surfshark-vilnius-n6y9w89q281x) — Vilnius, Lithuania
- [Senior PHP Developer (Ironwall)](https://feeny.ai/job/senior-php-developer-ironwall-surfshark-vilnius-f4efrczse7cd) — Vilnius, Lithuania
- [Senior VPN Software Engineer](https://feeny.ai/job/senior-vpn-software-engineer-surfshark-vilnius-p8qvge6asepy) — Vilnius, Lithuania
- [Mid/Senior Marketing Data Analyst](https://feeny.ai/job/mid-senior-marketing-data-analyst-surfshark-vilnius-fyq3skcpcp4y) — Vilnius, Lithuania
- [Senior Cybersecurity Engineer (SOC)](https://feeny.ai/job/senior-cybersecurity-engineer-soc-surfshark-vilnius-eezftz9gcf0v) — Vilnius, Lithuania
- [Senior Backend Engineer (Node.js)](https://feeny.ai/job/senior-backend-engineer-node-js-surfshark-vilnius-kk1ytp2eexs2) — Vilnius, Lithuania