Senior AppSec Lead: Drive SDLC Security & Risk

La Fosse; Greater London; Hybrid; GBP 81,000 - 99,000; Full time

Job summary

A global retail business seeks an Application Security Specialist to join their Information Security Team in London. The successful candidate will own and improve application security tooling, lead testing activities, and work closely with engineering and product teams to embed security into the software development lifecycle. Applicants should possess a strong background in application security and hands-on experience with secure coding and DevSecOps practices. This is a hybrid role offering a competitive salary of up to £90,000 plus bonuses and benefits.

Qualifications

• Strong background in application security within complex technology environments.
• Hands-on experience with secure coding, SAST, DAST, CI/CD integration, and DevSecOps practices.
• Good understanding of OWASP Top 10, API security, threat modelling, and common web application attack vectors.

Responsibilities

• Own and improve application security tooling across web, mobile, and API environments.
• Lead application security testing activity, including penetration testing and bug bounty.
• Partner with engineering and product teams to embed security into the SDLC.

Skills

Application security expertise

Secure coding

SAST

DAST

CI/CD integration

DevSecOps practices

OWASP Top 10

API security

Threat modelling

Job description

A global retail business seeks an Application Security Specialist to join their Information Security Team in London. The successful candidate will own and improve application security tooling, lead testing activities, and work closely with engineering and product teams to embed security into the software development lifecycle. Applicants should possess a strong background in application security and hands-on experience with secure coding and DevSecOps practices. This is a hybrid role offering a competitive salary of up to £90,000 plus bonuses and benefits.