Application Security Leader

RELX INC; London Borough of Richmond upon Thames; On-site; GBP 90,000 - 150,000; Full time

Job summary

RX Global seeks an experienced Principal Application Security Engineer to lead security across its global technology estate and partner with engineering leadership to embed security by design in the SDLC. This is a senior individual contributor role with enterprise-wide influence spanning cloud platforms, APIs, and customer-facing applications.

You will drive threat modelling, secure-by-design governance, posture management, and ongoing improvements while guiding security practices across

Qualifications

• Significant experience in Application Security, Product Security, or Security Engineering.
• Strong understanding of modern software development methodologies and engineering practices.
• Experience implementing Secure Development Lifecycle programmes.
• Experience conducting threat modelling and architecture security reviews.
• Deep understanding of application security principles, attack techniques, and risk management.
• Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, IaC Security, CI/CD Security, and API Security.
• Experience securing cloud-native environments, particularly AWS and Azure.
• Strong stakeholder management, communication, influencing, leadership, coaching, and mentoring skills.

Responsibilities

• Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
• Drive adoption of Secure by Design principles by embedding security throughout the SDLC, including threat modelling and security architecture reviews.
• Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling.
• Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying opportunities for automation and continuous improvement.
• Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, SCA, container security, IaC security, CI/CD security, API security reviews, and pentesting.
• Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers to promote secure coding, secure design, and developer-friendly security practices.
• Provide security guidance for cloud-native environments and modern architectures, including AWS, Azure, microservices, APIs, containers, serverless technologies, and SaaS platforms.
• Support governance, audit, compliance, risk assessment, and assurance activities while providing technical leadership and mentoring across engineering and security communities.

Skills

Application Security

Software development

Secure SDLC

Threat modelling

App security principles

OWASP Top10

Cloud security

Stakeholder mgmt

Tools

Aikido

CI/CD tooling

SAST tooling

DAST tooling

SCA tooling

Job description

Richmond

Full time

R117943

Are you passionate about building secure software and driving security excellence across a global technology landscape?

Do you enjoy partnering with engineering leaders to embed security by design and enable teams to deliver secure, innovative solutions at scale?

About our Team

RX Global aims to create unforgettable experiences for attendees and exhibitors through organizing events. Innovation, creativity, and collaboration drive the company to offer exceptional services to clients.

About the Role

We are seeking an experienced Principal Application Security Engineer to lead application security across RX's global technology estate.

Reporting directly to the Chief Information Security Officer (CISO), this role will serve as the senior technical authority for application security and secure software delivery practices. The successful candidate will partner closely with engineering leadership to ensure security is embedded throughout the software development lifecycle while enabling teams to deliver business value quickly and safely.

This is a highly visible individual contributor role with enterprise-wide influence across Digital, Global Business Systems, cloud platforms, APIs, integrations, and customer-facing applications.

The role combines technical leadership, application security expertise, engineering engagement, threat modelling, secure-by-design governance, and application security posture management.

Responsibilities

• Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
• Drive adoption of Secure by Design principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews.
• Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling.
• Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying opportunities for automation and continuous improvement.
• Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, CI/CD security, API security reviews, and penetration testing.
• Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers to promote secure coding, secure design, and developer-friendly security practices.
• Provide security guidance for cloud-native environments and modern architectures, including AWS, Azure, microservices, APIs, containers, serverless technologies, and SaaS platforms.
• Support governance, audit, compliance, risk assessment, and assurance activities while providing technical leadership and mentoring across engineering and security communities.

Requirements

• Significant experience in Application Security, Product Security, or Security Engineering.
• Strong understanding of modern software development methodologies and engineering practices.
• Experience implementing Secure Development Lifecycle programmes.
• Experience conducting threat modelling and architecture security reviews.
• Deep understanding of application security principles, attack techniques, and risk management.
• Hands‑on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security.
• Experience securing cloud‑native environments, particularly AWS and Azure.
• Strong stakeholder management, communication, influencing, leadership, coaching, and mentoring skills.

Work in a Way That Works for You

We promote a healthy work/life balance across the organisation. We offer an appealing working prospect for our people. With numerous wellbeing initiatives, shared parental leave, study assistance, and sabbaticals, we will help you meet your immediate responsibilities and your long‑term goals.

Working Pattern

Working flexible hours - flexing the times when you work in the day to help you fit everything in and work when you are the most productive.

About the Business

RX is a global leader in events and exhibitions, leveraging industry expertise, data, and technology to build businesses for individuals, communities, and organisations. With a presence in 25 countries across 41 industry sectors, RX hosts approximately 350 events annually. RX is committed to creating an inclusive work environment for all our people. RX empowers businesses to thrive by leveraging data‑driven insights and digital solutions. RX is part of RELX, a global provider of information‑based analytics and decision tools for professional and business customers. For more information, visit http://www.rxglobal.com

We know your well‑being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. Click here (https://www.relx.com/careers/join-us/benefits) to access benefits specific to your location.

We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.

We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.

USA Job Seekers:

EEO Know Your Rights.

RELX is a global provider of information-based analytics and decision tools for professional and business customers, enabling them to make better decisions, get better results and be more productive.

Our purpose is to benefit society by developing products that help researchers advance scientific knowledge; doctors and nurses improve the lives of patients; lawyers promote the rule of law and achieve justice and fair results for their clients; businesses and governments prevent fraud; consumers access financial services and get fair prices on insurance; and customers learn about markets and complete transactions.

Our purpose guides our actions beyond the products that we develop. It defines us as a company. Every day across RELX our employees are inspired to undertake initiatives that make unique contributions to society and the communities in which we operate.