Senior App Security Engineer—Secure by Design & Automation

RELX Group plc; Oxford; On-site; GBP 70,000 - 110,000; Full time

Job summary

Elsevier seeks a Senior Application Security Engineer to strengthen secure software delivery across engineering teams. You will embed security practices, tools, and automation into development workflows to enable secure-by-default delivery at scale.

You will partner with development teams, drive threat modelling, and design reusable patterns and templates to reduce risk and improve reliability across CI/CD pipelines.

Qualifications

• 5+ years of application security or related experience.
• BS Engineering/Computer Science required.
• Experience with CI/CD security and secure coding practices.

Responsibilities

• Partner with development teams to improve secure software delivery practices across applications and CI/CD pipelines.
• Triage and remediate application security findings through practical guidance and secure refactoring recommendations.
• Facilitate threat modelling activities and translate outcomes into actionable improvements and risk reduction measures.
• Design and maintain secure-by-default delivery patterns, reusable templates, and reference implementations.
• Support adoption of centrally managed tooling and automated security controls.
• Develop integrations and automation to enable security validation, audit evidence generation, and operational metrics.
• Collaborate with platform, architecture, and security teams to improve processes, tooling, and delivery capabilities.
• Communicate security guidance, standards, and best practices to stakeholders.

Skills

Application security

Software engineering

CI/CD security

Threat modelling

Communication

Collaboration

Education

BS Engineering/Computer Science

Tools

Automation tooling

Job description

Elsevier seeks a Senior Application Security Engineer to strengthen secure software delivery across engineering teams. You will embed security practices, tools, and automation into development workflows to enable secure-by-default delivery at scale.

You will partner with development teams, drive threat modelling, and design reusable patterns and templates to reduce risk and improve reliability across CI/CD pipelines.