Application Security Manager

Unily; Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading digital experience firm in Greater London is seeking an Application Security Manager responsible for establishing security practices across the software development lifecycle. The role entails defining secure development policies, leading security testing engagements, and ensuring the company delivers secure products efficiently. Ideal candidates will have hands-on experience with application security testing tools and a strong understanding of risk management and compliance frameworks. A great opportunity to join a passionate team dedicated to innovation while enjoying a flexible work environment.

Benefits

Generous base salary

Discretionary company bonus

25 days holiday plus an extra paid day off for birthday

Vitality life cover

Aviva pension

Income protection

Flexibility in work hours

Sustainability initiatives

Qualifications

• Proven experience in application security
• Hands-on experience with security testing tools
• Experience managing external penetration testing vendors

Responsibilities

• Define secure development policies
• Own the risk acceptance process
• Conduct application security testing
• Collaborate with engineering to embed security best practices

Skills

Application security

DevSecOps

CI/CD security integration

Threat modelling

Container security

Data privacy regulations

Education

Degree in computer science or cyber security

Tools

SAST

DAST

BurpSuite

IaC scanners

Job description

About Unily

Unily partners with the world’s largest and most complex enterprises to power Organizational Velocity through digital Employee Experience transformation. Iconic brands, including Estée Lauder Companies, CVS Health, and British Airways, use Unily’s market-leading Employee Experience platform to improve productivity, streamline communication, and foster a highly connected workplace.

Unily is the only triple leader recognized by all three of the major analysts. Unily is recognized as a Leader in the 2025 Gartner®Magic Quadrant™for Intranet Packaged Solutions, the 2024 Forrester Wave™ : Intranet Platforms, and the IDC MarketScape : Worldwide Experience-Centric Intelligent Digital Workspaces 2025. With these accolades, we continue to grow and expand our employee community with people who are passionate about joining us on this exciting journey.

Job Purpose

As we continue to expand our market share in the rapidly emerging Employee Experience platform category, we are looking for an Application Security Manager. This role is responsible for building and executing a comprehensive application security programme that combines strategic oversight with hands‑on technical execution. The Application Security Manager ensures that security is embedded throughout the software development lifecycle (SDLC), enabling Unily to deliver secure products at speed.

The Application Security Manager will define and enforce secure development policies and practices, establish privacy by design principles, and manage the risk and escalation process. They will actively engage in technical assurance activities such as threat modelling, application testing, dependency analysis, cloud and container security assessments and CI/CD pipeline hardening.

The role will act as both a strategic partner to leadership and a trusted advisor to engineering teams, being a customer‑facing point of contact when required.

Main Responsibilities

• Define and maintain secure development policies and privacy by design requirements
• Own the risk acceptance and escalation process, maintaining the risk register
• Develop and measure the application security strategy leveraging frameworks such as OWASP SAMM
• Support RFPs and sales responses on application security matters
• Lead and coordinate external penetration testing engagements and remediation follow‑up
• Drive risk‑based prioritisation, assigning and validating CVSS scores
• Deliver and manage secure development training programs
• Conduct and facilitate threat modelling and architecture and design security reviews
• Perform or coordinate application security testing
• Generate and manage software bills of materials (SBOMs) to manage supply‑chain risks
• Ensure build verification and oversee IaC and container/Kubernetes scanning within pipelines
• Provide guidance on secure cloud‑native architectures
• Evaluate and apply security testing tools and techniques (e.g. BurpSuite, fuzzing, IaC scanners, static analysers)
• Contribute to security metrics, reports and dashboards
• Collaborate with engineering, operations and product teams to embed security best practices throughout the whole SDLC

Requirements

• Proven experience in application security
• Strong knowledge of secure software development practices, DevSecOps and CI/CD security integration
• Hands‑on experience with application security testing tools and techniques (e.g. SAST, DAST, dependency checkers, IaC scanners, secret detection, container security tools)
• Understanding of threat modelling, architecture and design reviews and offensive security principles
• Familiarity with compliance and regulatory frameworks
• Experience with risk acceptance processes, CVSS scoring and vulnerability management
• Experience managing external penetration testing vendors
• Familiarity with SBOMs and software supply‑chain security
• Strong background in cloud and container security
• Ability to communicate with technical and non‑technical stakeholders
• Knowledge of data privacy regulations and GDPR, and how they intersect with application security
• Certifications such as CISSP, CSSLP, OSWE, OSCP or equivalents
• Degree in computer science, cyber security, related fields or equivalent experience

Why Work For Unily?

In addition to a generous base salary and discretionary company bonus, here are some things we think you will love :

Our awesome team culture. We are focused on achieving results as a team and having fun while we do it. You won’t find a friendlier or more dedicated bunch of people.

Our industry‑leading product. We are very proud of our ever‑evolving product, naturally we use (and love) it internally and provide the tools and resources for you (and our clients) to become a Unily expert.

The flexibility that we offer. We don’t just mean working from home occasionally. We operate on a hybrid basis, and also recognize that life happens during the 9‑5:30 and encourage a sustainable work / life balance.

Our bright and modern office spaces. When you need to be at the office we want it to be like being at home. We have a well‑stocked kitchen and the option to bring your dog to work.

We offer a fantastic suite of benefits. Including 25 days holiday plus an extra paid day off to enjoy your birthday, Vitality life cover (for health, sight, hearing and dental), Aviva pension (via a salary sacrifice scheme), life assurance, income protection and so many more.

Our commitment to sustainability and giving back to the community. We know working for an organisation that takes its environmental & social impact seriously is important, and we are proud to offer 1 fully paid volunteering day per year, an employee matching charity donation scheme and options to lease an Electric Vehicle through our salary sacrifice scheme.

View Unily's UK & EEA Careers Privacy Notice here

View Unily's USA Careers Privacy Notice here