Lead Application Security Architect & Capability Builder

Sure Exec Search; Greater London; Hybrid; GBP 100,000 - 120,000; Full time

Benefits offered by this job

Discretionary bonus

Excellent benefits package

Job summary

Sure Exec Search is seeking a Lead Application Security Engineer in London to establish and scale the firm’s application security capability. You will define standards, guardrails, and review processes, working with ICT, AI Engineering, and business owners to secure internal apps, APIs, cloud services, and SaaS platforms.

The role starts as a senior individual contributor with influence over the function’s growth and potential future team members.

Qualifications

• 7+ years in application security, DevSecOps, or security engineering.
• Collaborate with software engineering, DevOps and platform teams.
• Strong SDLC security knowledge: threat modelling, API security, secrets mgmt., security testing and remediation planning.
• Experience reviewing architectures, CI/CD pipelines, containers or IaC.
• Familiarity with Azure security controls and SaaS platforms.

Responsibilities

• Lead the development of the firm's application security capability and guardrails.
• Review designs, APIs, integrations and deployment patterns to identify risks early.
• Lead threat modelling for internal apps, integrations, automation and AI-enabled workflows.
• Guide secure SDLC practices including design reviews, secrets mgmt., and testing.
• Oversee security assurance activities including penetration testing and remediation tracking.
• Define security requirements and document architecture decisions and risk-based recommendations.

Skills

Application security

DevSecOps

Cloud security

Security engineering

Risk assessment

Education

CSSLP

CISSP

CCSP

GIAC

Tools

Azure Entra ID

Key Vault

API Management

Container security

Job description

Sure Exec Search is seeking a Lead Application Security Engineer in London to establish and scale the firm’s application security capability. You will define standards, guardrails, and review processes, working with ICT, AI Engineering, and business owners to secure internal apps, APIs, cloud services, and SaaS platforms.

The role starts as a senior individual contributor with influence over the function’s growth and potential future team members.