Senior Product Security Lead — AppSec & Compliance

IT WORLD LIMITED; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

IT WORLD LIMITED is seeking an experienced security professional with strong product security background to work within a software vendor environment in Greater London. The role requires hands-on AppSec expertise, threat modeling, and proficiency with SAST/DAST tools, SBOM management, and AI governance considerations.

Experience with CodeQL, Snyk, ZAP, and Code signing is essential, along with familiarity with GDPR obligations and incident response SLAs. CISSP, CSSLP, or OSCP/GWAPT are desirable.

Qualifications

• 10+ yrs; product security in a software vendor
• SSDLC; vulnerability remediation SLAs; Schedule 17 compliance; incident notice within 4/12 hrs; AI no-training and provenance controls; Cyber Resilience Act readiness
• Must have AppSec; CodeQL/Snyk/Mend/ZAP; dependency and SBOM management; secrets management
• Code-signing controls; GDPR and sub-processor obligations; AI governance.

Skills

Application security

Secure SDLC

SAST/DAST/SBOM

CodeQL

Snyk

OWASP

Education

CISSP

CSSLP

OSCP/GWAPT

Job description

IT WORLD LIMITED is seeking an experienced security professional with strong product security background to work within a software vendor environment in Greater London. The role requires hands-on AppSec expertise, threat modeling, and proficiency with SAST/DAST tools, SBOM management, and AI governance considerations.

Experience with CodeQL, Snyk, ZAP, and Code signing is essential, along with familiarity with GDPR obligations and incident response SLAs. CISSP, CSSLP, or OSCP/GWAPT are desirable.