Application Security Consultant - Shape Secure DevOps & Coding

Ricoh Europe; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Ricoh Europe is seeking an experienced Application Security Consultant to strengthen security across its European software products and services. You will act as a technical authority for engineering teams, conducting reviews, threat modelling, and secure design guidance.

You will drive secure development practices, integrate SAST/DAST into pipelines, and help shape a pan-European security capability within the Secure Development Centre of Excellence.

Qualifications

• Extensive experience in application security and secure development practices.
• Hands-on experience conducting application security reviews.
• Strong knowledge of common vulnerability classes and secure software principles.
• Experience implementing security within CI/CD and DevSecOps environments.
• Ability to read and understand code in Java, C, C++, C#, Python or similar.
• Knowledge of OWASP SAMM, ASVS, NIST CSF/SSDF.

Responsibilities

• Lead application security reviews for high-risk products and services.
• Conduct security assessments including SAST, DAST, API security, and architecture reviews.
• Assess applications against OWASP Top 10 and other standards.
• Translate findings into actionable remediation plans and secure design guidance.
• Develop and promote consistent security methodologies across teams.
• Support secure coding practices and training across development lifecycles.

Skills

Application security

SAST

DAST

SCA

CI/CD

DevSecOps

Threat modelling

OWASP SAMM/ASVS

Secure coding

Java

C

C++

C#

Python

AI security

Tools

SAST tools

DAST tools

SCA tools

CI/CD tools

Job description

Ricoh Europe is seeking an experienced Application Security Consultant to strengthen security across its European software products and services. You will act as a technical authority for engineering teams, conducting reviews, threat modelling, and secure design guidance.

You will drive secure development practices, integrate SAST/DAST into pipelines, and help shape a pan-European security capability within the Secure Development Centre of Excellence.