Global Application Security Leader

Reed Exhibitions Limited; Richmond; On-site; GBP 120,000 - 170,000; Full time

Job summary

Reed Exhibitions Limited seeks an experienced Principal Application Security Engineer to lead security across RX's global technology estate. You will partner with engineering leadership to embed security by design and enable secure software delivery at scale.

This role reports to the CISO and influences security posture across digital platforms, cloud, APIs, and integrations, while mentoring teams and driving continuous improvement.

Qualifications

• Significant experience in Application Security or Security Engineering.
• Experience implementing Secure Development Lifecycle programmes.
• Experience conducting threat modelling and architecture security reviews.
• Hands-on with OWASP Top 10, SAST, DAST, SCA, container security, IaC security, CI/CD security, and API security.

Responsibilities

• Define and maintain the application security strategy, roadmap, standards, controls, and maturity objectives.
• Embed Secure by Design across the SDLC with threat modelling and security reviews.
• Mature the Application Security Posture Management capability including tooling like Aikido.
• Develop KPIs, dashboards, and executive reporting for security and engineering stakeholders.
• Oversee vulnerability management across applications and platforms, including SAST/DAST, SCA, container security, and CI/CD security.
• Partner with Engineering Directors and Product Leaders to promote secure coding practices.
• Provide security guidance for cloud-native environments (AWS/Azure, microservices, APIs).
• Support governance, audits, risk assessments, and security mentoring across teams.

Skills

Application Security

Threat Modelling

Security by Design

SAST

DAST

SCA

Cloud Security (AWS/Azure)

Security Governance

Tools

Aikido

CI/CD Security

Container Security

Threat Modelling Tools

Job description

Reed Exhibitions Limited seeks an experienced Principal Application Security Engineer to lead security across RX's global technology estate. You will partner with engineering leadership to embed security by design and enable secure software delivery at scale.

This role reports to the CISO and influences security posture across digital platforms, cloud, APIs, and integrations, while mentoring teams and driving continuous improvement.