Global Application Security Leader: Secure by Design

RELX Group; Greater London; On-site; GBP 110,000 - 165,000; Full time

Benefits offered by this job

Healthy work/life balance

Parental leave

Study assistance

Sabbaticals

Job summary

RX is seeking an experienced Principal Application Security Engineer to lead application security across its global technology estate. Reporting to the CISO, this role will act as the senior technical authority for secure software delivery and lifecycle integration.

You will partner with engineering leadership to embed security while enabling rapid, safe business value. This high-visibility role spans Digital, Global Business Systems, cloud platforms, APIs, integrations, and customer-facing

Qualifications

• Significant experience in Application Security, Product Security, or Security Engineering.
• Experience leading application security programmes and governance across large software estates.
• Experience implementing Secure Development Lifecycle programmes and threat modelling.

Responsibilities

• Lead the RX Application Security programme, defining strategy, roadmap, standards, controls, and security maturity objectives.
• Embed Secure by Design principles across SDLC, including threat modelling and security reviews.
• Own and mature the Application Security Posture Management capability and related tooling.
• Develop KPIs, dashboards, and reporting for engineering and executives; identify automation opportunities.
• Oversee vulnerability management across apps and platforms including SAST, DAST, SCA, container, and CI/CD security.

Skills

Application Security

Threat Modelling

Secure SDLC

Cloud Security

Security Architecture

Vulnerability Management

OSS and Software Security

Security Metrics

Tools

Aikido

SAST

DAST

SCA

CI/CD Security

Job description

RX is seeking an experienced Principal Application Security Engineer to lead application security across its global technology estate. Reporting to the CISO, this role will act as the senior technical authority for secure software delivery and lifecycle integration.

You will partner with engineering leadership to embed security while enabling rapid, safe business value. This high-visibility role spans Digital, Global Business Systems, cloud platforms, APIs, integrations, and customer-facing