Application Security Service Manager

Red Bull; Elsbethen; Vor Ort; EUR 26.000 - 31.000; Vollzeit

Zusammenfassung

Red Bull sucht einen Application Security Service Manager in Elsbethen/Österreich, Vollzeit, zur Weiterentwicklung der Anwendungs­sicherheitskapazitäten und zur Integration sicherer Softwareentwicklung in den SDLC. Sie arbeiten eng mit Engineering, Produkt und Security zusammen, um Roadmaps zu definieren und Dienste skalierbar zu machen.

Sie steuern Initiativen von Konzept bis Umsetzung, koordinieren Stakeholdern, Budgets und Termine und unterstützen Sicherheitsprüfungen wie Pen-Tests,

Qualifikationen

• Universitätsabschluss in Informationssicherheit, Informatik, IT oder äquivalente Erfahrung
• Fließende Englischkenntnisse; Deutschkenntnisse sind von Vorteil
• Mindestens 3 Jahre Erfahrung in Anwendungs­sicherheit und sicheres Softwareentwicklung
• Erfahrung in Leitung von bereichsübergreifenden Initiativen von Konzept bis Umsetzung
• Gutes Verständnis von Secure SDLC, SAST/DAST/IAST, SCA, DevSecOps und OWASP Frameworks

Aufgaben

• Leitung von Initiativen zur Stärkung der Anwendungs­sicherheitsfähigkeiten (Secure SDLC, Code-Sicherheit, Entwickler-Enablement)
• Koordination von Stakeholdern, Anbietern und Budgets zur termingerechten Lieferung
• Unterstützung im Vulnerability Lifecycle, Berichte, KPIs und kontinuierliche Verbesserung
• Mitgestaltung von Governance, KPIs und Sicherheitsprozessen im Rahmen der Global Digital Security-Strategie
• Zusammenarbeit mit Engineering, Produkt, Architektur, AI, Cloud- und Infrastruktur-Teams

Kenntnisse

Security concepts discussion

Project management

Stakeholder management

Cross-functional leadership

Vulnerability management

Ausbildung

University degree in Information Security or related field

Tools

GitHub

GitLab

Wiz

Halo

Jira

Intigriti

Jobbeschreibung

Vollzeit

Application Security Service Manager

Elsbethen, Österreich

Are you ready to help shape the future of secure software development at Red Bull? As part of our Digital Security team, you will play a key role in safeguarding custom software development and advancing our application security capabilities. Partnering closely with security peers, engineering, development, and product teams, you will drive strategic initiatives, enhance security services, and help embed security across the entire software development lifecycle.

You will take ownership of initiatives end to end, from initial concept and planning through implementation and operational adoption, while also supporting the coordination and continuous evolution of existing application security services. This role offers a unique blend of technical insight, project leadership, and operational excellence. Although it is not a hands-on security testing position, you will be expected to confidently navigate technical discussions, define security requirements, challenge findings when needed, and collaborate closely with engineers and security specialists to drive meaningful outcomes. If you want to make a lasting impact by enabling scalable, modern, and effective security practices across Red Bull's digital landscape, this is your opportunity.

RESPONSIBILITIES

Areas that play to your strengths

All the responsibilities we'll trust you with:

APPLICATION SECURITY CAPABILITY DEVELOPMENT

In this role, you will lead initiatives that strengthen Red Bull's application security capabilities, including secure SDLC, code security, developer enablement, governance, and security tooling. Working closely with engineering teams and area security peers, you will help define roadmap priorities, improve processes, and deliver scalable security capabilities that support secure software development across the organization.

PROJECT DELIVERY & OPERATIONAL COORDINATION

You will drive strategic initiatives end to end, from initial concept through implementation, rollout, and operational adoption. This includes coordinating stakeholders, vendors, technical experts, budgets, timelines, and governance structures to ensure successful delivery. In addition to project-based work, you will also support the operational coordination and administration of recurring application security activities.

APPLICATION SECURITY OPERATIONS & VULNERABILITY MANAGEMENT

Part of the role involves active participation in the vulnerability management lifecycle for custom-developed applications. You will support vulnerability triage, remediation prioritization, mitigation activities, and remediation tracking, while coordinating security-related operational tasks such as reporting, KPI tracking, and continuous service improvement in close collaboration with development teams and security specialists.

SECURITY ASSURANCE

You will also contribute to the continuous improvement of Red Bull's security assurance services, including penetration testing, bug bounty programs, offensive security, AI security testing, and related security assessments. In doing so, you will coordinate internal experts and external partners, help define assessment scopes, review findings, and drive remediation activities that further strengthen secure software development.

STAKEHOLDER MANAGEMENT & GOVERNANCE

In close partnership with engineering, product, architecture, AI, cloud, and infrastructure teams, you will help integrate security into software development processes. At the same time, you will continuously enhance governance, operating models, KPIs, and security processes, ensuring that application security services remain aligned with Red Bull's Global Digital Security strategy.

Experience

Your areas of knowledge and expertise

That matter most for this role:

• University degree in Information Security, Computer Science, Information Technology, Business Informatics, or equivalent experience
• Fluent English skills, German is a plus
• At least three years of experience in application security, secure software development, DevSecOps, code security, or cybersecurity
• Proven experience leading cross-functional initiatives and projects from concept through implementation
• Profound understanding of the Secure SDLC, SAST, DAST, IAST, SCA, DevSecOps, shift-left practices, and modern application security practices as well as a good understanding of vulnerability management, secure coding, penetration testing concepts, and OWASP frameworks
• Experience in coordinating application security services (e.g. vulnerability management, penetration testing, bug bounty programs, or security assessments) and using security and collaboration platforms such as GitHub, GitLab, Wiz, Halo, Jira, Intigriti, or similar tools
• Strong technical background with the ability to discuss security concepts, define scopes, evaluate remediation approaches, and collaborate with engineering teams, combined with excellent project and stakeholder management skills
• Self-motivated, pragmatic, and passionate about improving secure software development and application security capabilities
• Travel: 0-10 %

JOIN THE TEAM

Got what it takes?

In your application we want to see your personal style - what makes you tick and why you think your next opportunity is here with us.

Due to legal reasons we are obliged to disclose the minimum salary according to the collective agreement for this position, which is EUR 2,535 gross per month. However, our attractive compensation package is based on market-oriented salaries and is therefore significantly above the stated minimum salary. As an employer, we value diversity and support people in developing their potential and strengths, realizing their ideas and seizing opportunities. We believe passionately that employing a diverse workforce is central to our success. We welcome applications from all members of society irrespective of age, skin colour, religion, gender, sexual orientation or origin.