Global Principal Application Security Engineer

RELX International

Richmond

On-site

GBP 120,000 - 160,000

Full time

4 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

RX Global is seeking a Principal Application Security Engineer to lead application security across its global technology estate, reporting directly to the CISO. You will be the senior technical authority for secure software delivery and will partner closely with engineering leadership to embed security by design while enabling teams to move quickly and safely.

This role requires hands-on experience in SDLC security, threat modelling, and governance across cloud-native environments (AWS/Azure),

Qualifications

Significant experience in Application Security, Product Security, or Security Engineering.
Strong understanding of modern software development methodologies and engineering practices.
Experience implementing Secure Development Lifecycle programmes.
Experience conducting threat modelling and architecture security reviews.
Deep understanding of application security principles, attack techniques, and risk management.
Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, IaC Security, CI/CD Security, and API Security.
Experience securing cloud-native environments, particularly AWS and Azure.
Strong stakeholder management, communication, influencing, leadership, coaching, and mentoring skills.

Responsibilities

Lead the RX Application Security programme, defining strategy, roadmap, standards, controls, and security maturity objectives.
Drive adoption of Secure by Design principles by embedding security throughout the SDLC, including threat modelling and security architecture reviews.
Own and mature the Application Security Posture Management capability, including management and optimisation of tools.
Develop KPIs, dashboards, and reporting for engineering and executives, identifying automation opportunities.
Oversee vulnerability management across applications and platforms (SAST, DAST, SCA, container security, IaC, CI/CD, API security, pentesting).
Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers to promote secure coding and secure design.
Provide security guidance for cloud-native environments and modern architectures (AWS, Azure, microservices, APIs, containers, serverless, SaaS).
Support governance, audit, compliance, risk assessment, and assurance activities while mentoring communities.