Global Application Security Leader

RX Global; Greater London; On-site; GBP 110,000 - 140,000; Full time

Benefits offered by this job

Flexible hours

Wellbeing initiatives

Shared parental leave

Study assistance

Sabbaticals

Job summary

RX Global seeks an experienced Principal Application Security Engineer to lead security across its global technology estate. You will partner with engineering leadership to embed security by design, enabling teams to deliver secure software at scale.

This highly visible role serves as the senior technical authority for application security and secure software delivery, influencing across digital platforms, cloud, APIs, and customer-facing applications.

Qualifications

• Significant experience in Application Security or related fields.
• Experience implementing Secure Development Lifecycle programmes.
• Hands-on with modern security testing tooling and cloud-native environments.

Responsibilities

• Lead the RX Application Security programme, defining strategy, roadmaps, standards, controls and maturity objectives.
• Own and mature Application Security Posture Management including tooling like Aikido.
• Develop KPIs, dashboards, and reporting for engineering and executives; drive automation and improvements.
• Oversee vulnerability management across applications and platforms including SAST/DAST/SCAs and API security.
• Partner with Engineering Directors, Architects, and Product Leaders to promote secure coding and design.

Skills

Application security

Threat modelling

Secure SDLC

Cloud security

OWASP Top 10

SAST

DAST

SCA

Container security

CI/CD security

API security

Stakeholder management

Leadership

Mentoring

Tools

Aikido

SAST tooling

DAST tooling

SCA tooling

CI/CD tooling

Cloud security tooling

Container security tooling

API security tooling

Job description

RX Global seeks an experienced Principal Application Security Engineer to lead security across its global technology estate. You will partner with engineering leadership to embed security by design, enabling teams to deliver secure software at scale.

This highly visible role serves as the senior technical authority for application security and secure software delivery, influencing across digital platforms, cloud, APIs, and customer-facing applications.