Application Security Lead - (SAST, AI)

Michael Page; Ae; In loco; GBP 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

Michael Page is seeking a seasoned leader to elevate its Application Security function across software engineering teams. The role requires hands-on SAST, secure SDLC, and strong governance across GitLab-backed pipelines.

You will shape security standards, mentor engineers, and drive AI-assisted security initiatives in a financial services context. The successful candidate will bring 7+ years in software/security, deep OWASP knowledge, and experience with AI tooling risks and ISO 27001

Competenze

• 7+ years' experience in Software Engineering and/or Application Security, including 3+ years in a dedicated Application Security role.
• Hands on experience with SAST, dependency scanning, vulnerability management, and secure SDLC practices.
• Strong experience securing source code repositories and CI/CD pipelines, ideally within GitLab environments.
• Proficiency in at least two of Python, Java, Go, or TypeScript.
• Experience with cloud native application security, container security, and DevSecOps practices.
• Strong knowledge of OWASP Top 10, OWASP Top 10 for LLM Applications, and secure coding principles.
• Experience evaluating and implementing AI driven security tooling and managing risks associated with AI generated code and coding assistants.
• Familiarity with ISO 27001 and application security governance frameworks.
• Previous experience within Financial Services, Banking, or FinTech environments preferred

Mansioni

• Lead and mature the Application Security programme across software engineering teams.
• Own and manage Static Application Security Testing (SAST) platforms, policies, and processes.
• Drive secure code practices throughout the software development lifecycle (SDLC).
• Manage source repository security within GitLab, ensuring strong security controls across code repositories and development pipelines.
• Oversee vulnerability management activities, including identification, prioritisation, remediation tracking, and reporting.
• Establish application security standards, frameworks, and governance across development teams.
• Partner closely with engineering leaders to build security capabilities and embed security-by-design principles.
• Design and deliver secure coding training programmes for software engineers.
• Introduce and operationalise AI-assisted application security capabilities to improve vulnerability detection, code review, and remediation efficiency.
• Evaluate and govern the security risks associated with AI coding assistants, AI-generated code, and LLM-enabled applications.
• Drive adoption of security tooling, metrics, and reporting to improve software security posture.
• Provide subject matter expertise on secure architecture, secure development practices, and application security controls.
• Collaborate with DevOps, Cloud, and Platform Engineering teams to secure cloud-native applications, containers, and CI/CD environments.

Conoscenze

Python

Java

Go

TypeScript

GitLab

SAST

Strumenti

GitLab

Descrizione del lavoro

• Lead the appsec strategy for a leading FS firm
• Drive AI powered security innovation

• Lead the appsec strategy for a leading FS firm
• Drive AI powered security innovation

About Our Client

Leading organisation in Abu Dhabi.

Job Description

• Lead and mature the Application Security programme across software engineering teams.
• Own and manage Static Application Security Testing (SAST) platforms, policies, and processes.
• Drive secure code practices throughout the software development lifecycle (SDLC).
• Manage source repository security within GitLab, ensuring strong security controls across code repositories and development pipelines.
• Oversee vulnerability management activities, including identification, prioritisation, remediation tracking, and reporting.
• Establish application security standards, frameworks, and governance across development teams.
• Partner closely with engineering leaders to build security capabilities and embed security-by-design principles.
• Design and deliver secure coding training programmes for software engineers.
• Introduce and operationalise AI-assisted application security capabilities to improve vulnerability detection, code review, and remediation efficiency.
• Evaluate and govern the security risks associated with AI coding assistants, AI-generated code, and LLM-enabled applications.
• Drive adoption of security tooling, metrics, and reporting to improve software security posture.
• Provide subject matter expertise on secure architecture, secure development practices, and application security controls.
• Collaborate with DevOps, Cloud, and Platform Engineering teams to secure cloud-native applications, containers, and CI/CD environments.

You will have technical ownership of:

• SAST strategy, tooling, and governance.
• Source repository security within the GitLab ecosystem.
• Dependency and software supply chain security.
• Vulnerability monitoring, oversight, and remediation governance.
• AI-driven application security initiatives and tooling.
• Secure coding standards and engineering enablement.
• Security controls across cloud-native applications and containerised workloads.

The Successful Applicant

• 7+ years' experience in Software Engineering and/or Application Security, including 3+ years in a dedicated Application Security role.
• Hands on experience with SAST, dependency scanning, vulnerability management, and secure SDLC practices.
• Strong experience securing source code repositories and CI/CD pipelines, ideally within GitLab environments.
• Proficiency in at least two of Python, Java, Go, or TypeScript.
• Experience with cloud native application security, container security, and DevSecOps practices.
• Strong knowledge of OWASP Top 10, OWASP Top 10 for LLM Applications, and secure coding principles.
• Experience evaluating and implementing AI driven security tooling and managing risks associated with AI generated code and coding assistants.
• Familiarity with ISO 27001 and application security governance frameworks.
• Previous experience within Financial Services, Banking, or FinTech environments preferred

What's on Offer

• Opportunity to lead and shape a modern Application Security function within a growing financial services organisation.
• Exposure to cutting edge AI security initiatives and secure software engineering practices.

Contact: Ruwise Sheriff

Quote job ref: JN-102026-7136686