Application Security Consultant: Secure DevOps & AI

Vastbouw; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Ricoh Europe is seeking an Application Security Consultant to join our Cyber, Risk & Security team. You will lead security reviews and help embed secure development practices across Europe.

You will work with engineering, DevOps, and product teams to implement SAST/DAST, CI/CD security, threat modelling, and secure AI considerations. Strong collaboration and the ability to translate security concepts for developers is essential.

Qualifications

• Extensive hands-on experience in application security and secure development.
• Proven ability to conduct thorough security reviews of complex applications.
• Strong knowledge of vulnerability classes and secure coding practices.
• Experience embedding security into CI/CD and DevSecOps environments.

Responsibilities

• Lead application security reviews for high-risk products and services.
• Conduct SAST, DAST, API security testing, fuzzing and architecture-level assessments.
• Assess applications against OWASP Top 10 and other security standards.
• Identify vulnerabilities and translate findings into remediation plans.
• Provide secure design and coding guidance throughout the development lifecycle.
• Help grow a pan-European Application Security capability within the Secure Development Centre of Excellence.
• Promote consistent security methodologies and best practices.
• Support secure coding standards across Java, C, C++, C#, Python and other languages.
• Integrate security controls and testing into CI/CD pipelines (SAST, DAST, SCA).
• Support threat modelling and vulnerability management across products.
• Collaborate with developers, architects, DevOps and product owners to embed security into workflows.
• Deliver security awareness sessions and developer-focused training.
• Contribute to secure AI development initiatives, addressing AI model risks.
• Monitor emerging threats and propose improvements.

Skills

Extensive experience in application‑s​

Hands-on security reviews

Security principles & vulnerabilities

CI/CD / DevSecOps security

Read/understand code (Java, C, C++, C#

Threat modelling (STRIDE)

App/API/Web security understanding

Clear vulnerability communication

Stakeholder management

Business/regulatory risk awareness

Tools

SAST, DAST, SCA tools

Job description

Ricoh Europe is seeking an Application Security Consultant to join our Cyber, Risk & Security team. You will lead security reviews and help embed secure development practices across Europe.

You will work with engineering, DevOps, and product teams to implement SAST/DAST, CI/CD security, threat modelling, and secure AI considerations. Strong collaboration and the ability to translate security concepts for developers is essential.