Principal Application Security Architect

RELX INC; London Borough of Richmond upon Thames; On-site; GBP 90,000 - 150,000; Full time

Job summary

RX Global seeks an experienced Principal Application Security Engineer to lead security across its global technology estate and partner with engineering leadership to embed security by design in the SDLC. This is a senior individual contributor role with enterprise-wide influence spanning cloud platforms, APIs, and customer-facing applications.

You will drive threat modelling, secure-by-design governance, posture management, and ongoing improvements while guiding security practices across

Qualifications

• Significant experience in Application Security, Product Security, or Security Engineering.
• Strong understanding of modern software development methodologies and engineering practices.
• Experience implementing Secure Development Lifecycle programmes.
• Experience conducting threat modelling and architecture security reviews.
• Deep understanding of application security principles, attack techniques, and risk management.
• Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, IaC Security, CI/CD Security, and API Security.
• Experience securing cloud-native environments, particularly AWS and Azure.
• Strong stakeholder management, communication, influencing, leadership, coaching, and mentoring skills.

Responsibilities

• Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
• Drive adoption of Secure by Design principles by embedding security throughout the SDLC, including threat modelling and security architecture reviews.
• Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling.
• Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying opportunities for automation and continuous improvement.
• Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, SCA, container security, IaC security, CI/CD security, API security reviews, and pentesting.
• Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers to promote secure coding, secure design, and developer-friendly security practices.
• Provide security guidance for cloud-native environments and modern architectures, including AWS, Azure, microservices, APIs, containers, serverless technologies, and SaaS platforms.
• Support governance, audit, compliance, risk assessment, and assurance activities while providing technical leadership and mentoring across engineering and security communities.

Skills

Application Security

Software development

Secure SDLC

Threat modelling

App security principles

OWASP Top10

Cloud security

Stakeholder mgmt

Tools

Aikido

CI/CD tooling

SAST tooling

DAST tooling

SCA tooling

Job description

RX Global seeks an experienced Principal Application Security Engineer to lead security across its global technology estate and partner with engineering leadership to embed security by design in the SDLC. This is a senior individual contributor role with enterprise-wide influence spanning cloud platforms, APIs, and customer-facing applications.

You will drive threat modelling, secure-by-design governance, posture management, and ongoing improvements while guiding security practices across