Principal App Security Leader: Secure-by-Design & Cloud

RX Global; United Kingdom; On-site; GBP 120,000 - 180,000; Full time

Job summary

RX Global seeks a Principal Application Security Engineer to lead security across its global technology estate, reporting to the CISO. You will champion secure software delivery, drive threat modelling, and govern security posture across cloud platforms, APIs, and integrations.

You will partner with engineering leaders to embed Secure by Design, mature the security tooling like Aikido, and provide KPIs and dashboards for executives.

Qualifications

• Significant experience in Application Security or Security Engineering.
• Experience with threat modelling and architecture reviews.
• Hands-on with OWASP Top 10, SAST, DAST, SCA, container and IaC security.
• Experience securing cloud-native environments (AWS/Azure).
• Strong stakeholder management and leadership capabilities.

Responsibilities

• Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
• Drive adoption of Secure by Design principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews.
• Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling.
• Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying opportunities for automation and continuous improvement.
• Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, CI/CD security, API security reviews, and penetration testing.
• Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers to promote secure coding, secure design, and developer-friendly security practices.
• Provide security guidance for cloud-native environments and modern architectures, including AWS, Azure, microservices, APIs, containers, serverless technologies, and SaaS platforms.
• Support governance, audit, compliance, risk assessment, and assurance activities while providing technical leadership and mentoring across engineering and security communities.

Skills

Application Security

Threat Modelling

Security Architecture

OWASP Top 10

SAST

DAST

SCA

Container Security

IoC Security

CI/CD Security

API Security

AWS

Azure

Stakeholder Mgmt

Leadership

Coaching

Mentoring

Tools

Aikido

Job description

RX Global seeks a Principal Application Security Engineer to lead security across its global technology estate, reporting to the CISO. You will champion secure software delivery, drive threat modelling, and govern security posture across cloud platforms, APIs, and integrations.

You will partner with engineering leaders to embed Secure by Design, mature the security tooling like Aikido, and provide KPIs and dashboards for executives.