Lead, Secure-by-Design Applications (Hybrid, Car Allowance)

Halfords; Redditch; Ibrido; GBP 65.000 - 90.000; Tempo pieno

Vantaggi offerti da questo lavoro

Car allowance

Annual discretionary bonus

Pension

Life assurance

25 days annual leave

Descrizione del lavoro

Halfords is seeking an Application Security Lead to own and shape the security capability across a diverse technology estate. You will work with development, architecture, product owners, and third parties to embed secure-by-design principles and ensure appropriate controls are built into delivery processes.

This role requires threat modelling, security design reviews, and hands-on tooling across SAST, DAST, and SCA.

Competenze

• Proven experience leading or owning application security activities within a modern software development environment.
• Strong knowledge of application security principles, secure coding practices, and OWASP Top 10 vulnerabilities.
• Hands-on experience with SAST, DAST, SCA, secrets management, and vulnerability assessment tools.
• Experience integrating security controls into CI/CD pipelines and cloud-native development environments.
• Strong understanding of API security, authentication, authorization, and OAuth 2.0/OIDC/SAML.
• Knowledge of PCI DSS requirements and their application within software development.
• Security certifications such as OSCP/OSCE or equivalent are advantageous.

Mansioni

• Own and develop the organisation's application security practice, embedding secure-by-design principles.
• Lead threat modelling and security design reviews for new applications and major changes.
• Select, implement, and manage application security tooling (SAST, DAST, SCA, secrets detection).
• Review testing results, assess risk, and provide remediation recommendations to engineering teams.
• Act as an application security release gate and escalate as needed.
• Coordinate penetration testing activities, manage findings and remediation.
• Work with architects, developers, and third parties to establish security standards and guardrails.

Conoscenze

Application security

Threat modelling

Security tooling

CI/CD security

Cloud-native

API security

OAuth 2.0

SAML

Strumenti

SAST

DAST

SCA

Secrets management

Vulnerability assessment

Descrizione del lavoro

Halfords is seeking an Application Security Lead to own and shape the security capability across a diverse technology estate. You will work with development, architecture, product owners, and third parties to embed secure-by-design principles and ensure appropriate controls are built into delivery processes.

This role requires threat modelling, security design reviews, and hands-on tooling across SAST, DAST, and SCA.