Application Security Leader

About the role

We are seeking an experienced Principal Application Security Engineer to lead application security across RX's global technology estate. Reporting directly to the Chief Information Security Officer, this role serves as the senior technical authority for application security and secure software delivery practices.

Key responsibilities

• Lead the RX Application Security programme, defining strategy, roadmap, standards and maturity objectives.
• Drive Secure‑by‑Design adoption across the Secure Development Lifecycle, including threat modelling and architecture reviews.
• Own and mature Application Security Posture Management, managing tools such as Aikido.
• Develop KPIs, dashboards and reporting for engineering and executive stakeholders.
• Oversee vulnerability management across SAST, DAST, SCA, container security, IaC, CI/CD and API security.
• Partner with engineering leaders to promote secure coding and developer‑friendly security practices.

Required profile

• Significant experience in Application Security, Product Security or Security Engineering.
• Strong understanding of modern software development methodologies and Secure Development Lifecycle implementation.
• Hands‑on experience with threat modelling and security architecture reviews.
• Excellent stakeholder management, communication and leadership skills.

Required skills

• Secure Development Lifecycle (SDLC)
• Threat Modelling
• OWASP Top 10
• SAST, DAST, Software Composition Analysis (SCA)
• Container Security, Infrastructure‑as‑Code Security
• CI/CD Security, API Security
• Cloud‑native environments: AWS, Azure
• Microservices, serverless, SaaS platforms

What we offer

• Healthy work‑life balance with flexible working hours.
• Wellbeing initiatives, shared parental leave, study assistance and sabbaticals.