Application Security Service Manager

Redbull; Elsbethen; Vor Ort; EUR 26.000 - 31.000; Vollzeit

Zusammenfassung

Red Bull is seeking an experienced Application Security professional to lead capability development across secure SDLC, code security, and developer enablement. You will work with engineering and security peers to define roadmaps, improve processes, and deliver scalable security services.

The role covers security operations, vulnerability management, governance, and collaboration with stakeholders to embed security into development.

Qualifikationen

• University degree in Information Security or related field
• Fluent English; German a plus
• At least three years in application security, secure software development, or DevSecOps
• Proven experience leading cross-functional initiatives from concept through implementation
• Strong understanding of SAST/DAST/IAST, SCA, DevSecOps, and vulnerability management
• Experience coordinating application security services and using GitHub, GitLab, Jira, Intigriti or similar tools

Aufgaben

• Lead initiatives to strengthen Red Bull's application security capabilities
• Define roadmaps, improve processes, and deliver scalable security capabilities
• Coordinate stakeholders, budgets, timelines, and governance structures for secure software development
• Participate in vulnerability triage, remediation prioritization, and remediation tracking
• Coordinate security assessments, bug bounty programs, and penetration testing activities
• Integrate security into software development processes with governance and KPI improvements

Kenntnisse

Application security

DevSecOps

Cross-functional leadership

Stakeholder management

Secure SDLC

Vulnerability management

Ausbildung

University degree in Information Security / CS / IT

Tools

GitHub

GitLab

Jira

Intigriti

Wiz

Halo

Jobbeschreibung

APPLICATION SECURITY CAPABILITY DEVELOPMENT

In this role, you will lead initiatives that strengthen Red Bull's application security capabilities, including secure SDLC, code security, developer enablement, governance, and security tooling. Working closely with engineering teams and area security peers, you will help define roadmap priorities, improve processes, and deliver scalable security capabilities that support secure software development across the organization.

PROJECT DELIVERY & OPERATIONAL COORDINATION

You will drive strategic initiatives end to end, from initial concept through implementation, rollout, and operational adoption. This includes coordinating stakeholders, vendors, technical experts, budgets, timelines, and governance structures to ensure successful delivery. In addition to project-based work, you will also support the operational coordination and administration of recurring application security activities.

APPLICATION SECURITY OPERATIONS & VULNERABILITY MANAGEMENT

Part of the role involves active participation in the vulnerability management lifecycle for custom-developed applications. You will support vulnerability triage, remediation prioritization, mitigation activities, and remediation tracking, while coordinating security-related operational tasks such as reporting, KPI tracking, and continuous service improvement in close collaboration with development teams and security specialists.

SECURITY ASSURANCE

You will also contribute to the continuous improvement of Red Bull's security assurance services, including penetration testing, bug bounty programs, offensive security, AI security testing, and related security assessments. In doing so, you will coordinate internal experts and external partners, help define assessment scopes, review findings, and drive remediation activities that further strengthen secure software development.

STAKEHOLDER MANAGEMENT & GOVERNANCE

In close partnership with engineering, product, architecture, AI, cloud, and infrastructure teams, you will help integrate security into software development processes. At the same time, you will continuously enhance governance, operating models, KPIs, and security processes, ensuring that application security services remain aligned with Red Bull's Global Digital Security strategy.

QUALIFICATIONS & REQUIREMENTS

• University degree in Information Security, Computer Science, Information Technology, Business Informatics, or equivalent experience
• Fluent English skills, German is a plus
• At least three years of experience in application security, secure software development, DevSecOps, code security, or cybersecurity
• Proven experience leading cross-functional initiatives and projects from concept through implementation
• Profound understanding of the Secure SDLC, SAST, DAST, IAST, SCA, DevSecOps, shift-left practices, and modern application security practices as well as a good understanding of vulnerability management, secure coding, penetration testing concepts, and OWASP frameworks
• Experience in coordinating application security services (e.g. vulnerability management, penetration testing, bug bounty programs, or security assessments) and using security and collaboration platforms such as GitHub, GitLab, Wiz, Halo, Jira, Intigriti, or similar tools
• Strong technical background with the ability to discuss security concepts, define scopes, evaluate remediation approaches, and collaborate with engineering teams, combined with excellent project and stakeholder management skills
• Self-motivated, pragmatic, and passionate about improving secure software development and application security capabilities

Due to legal reasons we are obliged to disclose the minimum salary according to the collective agreement for this position, which is EUR 2,535 gross per month. However, our attractive compensation package is based on market-oriented salaries and is therefore significantly above the stated minimum salary.

As an employer, we value diversity and support people in developing their potential and strengths, realizing their ideas and seizing opportunities. We believe passionately that employing a diverse workforce is central to our success. We welcome applications from all members of society irrespective of age, skin colour, religion, gender, sexual orientation or origin.