Global Application Security Leader

Reed Exhibitions Limited Company; London Borough of Richmond upon Thames; On-site; GBP 130,000 - 180,000; Full time

Benefits offered by this job

Flexible working hours

Country-specific benefits

Job summary

RX Global is seeking a Principal Application Security Engineer to lead application security across its global technology estate. You will partner with engineering leaders to embed security by design and enable teams to deliver secure, scalable software.

Reporting to the CISO, you will own the AppSec programme, drive threat modelling, secure SDLC governance, and oversee security tooling and posture management across cloud-native environments including AWS and Azure.

Qualifications

• Significant experience in Application Security, Product Security, or Security Engineering.
• Strong understanding of modern software development methodologies and engineering practices.
• Experience implementing Secure Development Lifecycle programmes.
• Experience conducting threat modelling and architecture security reviews.
• Deep understanding of application security principles, attack techniques, and risk management.
• Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security.
• Experience securing cloud-native environments, particularly AWS and Azure.

Responsibilities

• Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
• Drive adoption of Secure by Design principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews.
• Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling.
• Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying opportunities for automation and continuous improvement.
• Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, CI/CD security, API security reviews, and penetration testing.
• Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers to promote secure coding, secure design, and developer-friendly security practices.
• Provide security guidance for cloud-native environments and modern architectures, including AWS, Azure, microservices, APIs, containers, serverless technologies, and SaaS platforms.
• Support governance, audit, compliance, risk assessment, and assurance activities while providing technical leadership and mentoring across engineering and security communities.

Skills

Application Security

Threat Modelling

Secure SDLC

SAST

DAST

SCA

Container Security

CI/CD Security

API Security

Cloud Security (AWS/Azure)

Security Architecture

Tools

Aikido

Job description

RX Global is seeking a Principal Application Security Engineer to lead application security across its global technology estate. You will partner with engineering leaders to embed security by design and enable teams to deliver secure, scalable software.

Reporting to the CISO, you will own the AppSec programme, drive threat modelling, secure SDLC governance, and oversee security tooling and posture management across cloud-native environments including AWS and Azure.