AI-Driven AppSec Lead: SAST & Secure SDLC

Michael Page; Ae; On-site; GBP 120,000 - 180,000; Full time

Job summary

Michael Page is seeking a seasoned leader to elevate its Application Security function across software engineering teams. The role requires hands-on SAST, secure SDLC, and strong governance across GitLab-backed pipelines.

You will shape security standards, mentor engineers, and drive AI-assisted security initiatives in a financial services context. The successful candidate will bring 7+ years in software/security, deep OWASP knowledge, and experience with AI tooling risks and ISO 27001

Qualifications

• 7+ years' experience in Software Engineering and/or Application Security, including 3+ years in a dedicated Application Security role.
• Hands on experience with SAST, dependency scanning, vulnerability management, and secure SDLC practices.
• Strong experience securing source code repositories and CI/CD pipelines, ideally within GitLab environments.
• Proficiency in at least two of Python, Java, Go, or TypeScript.
• Experience with cloud native application security, container security, and DevSecOps practices.
• Strong knowledge of OWASP Top 10, OWASP Top 10 for LLM Applications, and secure coding principles.
• Experience evaluating and implementing AI driven security tooling and managing risks associated with AI generated code and coding assistants.
• Familiarity with ISO 27001 and application security governance frameworks.
• Previous experience within Financial Services, Banking, or FinTech environments preferred

Responsibilities

• Lead and mature the Application Security programme across software engineering teams.
• Own and manage Static Application Security Testing (SAST) platforms, policies, and processes.
• Drive secure code practices throughout the software development lifecycle (SDLC).
• Manage source repository security within GitLab, ensuring strong security controls across code repositories and development pipelines.
• Oversee vulnerability management activities, including identification, prioritisation, remediation tracking, and reporting.
• Establish application security standards, frameworks, and governance across development teams.
• Partner closely with engineering leaders to build security capabilities and embed security-by-design principles.
• Design and deliver secure coding training programmes for software engineers.
• Introduce and operationalise AI-assisted application security capabilities to improve vulnerability detection, code review, and remediation efficiency.
• Evaluate and govern the security risks associated with AI coding assistants, AI-generated code, and LLM-enabled applications.
• Drive adoption of security tooling, metrics, and reporting to improve software security posture.
• Provide subject matter expertise on secure architecture, secure development practices, and application security controls.
• Collaborate with DevOps, Cloud, and Platform Engineering teams to secure cloud-native applications, containers, and CI/CD environments.

Skills

Python

Java

Go

TypeScript

GitLab

SAST

Tools

GitLab

Job description

Michael Page is seeking a seasoned leader to elevate its Application Security function across software engineering teams. The role requires hands-on SAST, secure SDLC, and strong governance across GitLab-backed pipelines.

You will shape security standards, mentor engineers, and drive AI-assisted security initiatives in a financial services context. The successful candidate will bring 7+ years in software/security, deep OWASP knowledge, and experience with AI tooling risks and ISO 27001