Global Application Security Leader — Secure-by-Design Advocate

Relx Plc; Richmond, Northern (VA, KY); Hybrid; USD 140,000 - 170,000; Full time

Job summary

RX Global, a RELX group company in Richmond, VA, seeks a Principal Application Security Engineer to lead security across its global technology estate. You will partner with engineering leadership to embed security by design and enable secure software delivery at scale, influencing enterprise-wide practices and tooling.

This high-visibility individual contributor role covers cloud, APIs, containers, and modern architectures, with opportunities to mentor teams and shape security strategy.

Qualifications

• Significant experience in Application Security, Product Security, or Security Engineering.
• Strong understanding of modern software development methodologies and engineering practices.
• Experience implementing Secure Development Lifecycle programmes.
• Experience conducting threat modelling and architecture security reviews.
• Deep understanding of application security principles, attack techniques, and risk management.
• Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, IaC Security, CI/CD Security, and API Security.
• Experience securing cloud-native environments, particularly AWS and Azure.
• Strong stakeholder management, communication, influencing, leadership, coaching, and mentoring skills.

Responsibilities

• Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
• Drive adoption of Secure by Design principles by embedding security throughout the SDLC, including threat modelling and security reviews.
• Own and mature the Application Security Posture Management capability and related tooling.
• Develop KPIs, dashboards, and reporting for engineering and executives; identify automation opportunities.
• Oversee vulnerability management across applications and platforms (SAST/DAST/CI/CD/security reviews).
• Partner with Engineering, Product, and Software Engineers to promote secure coding and design.
• Provide security guidance for cloud-native environments (AWS/Azure, microservices, containers, serverless, SaaS).
• Support governance, compliance, risk assessment, and assurance activities; mentor teams across engineering and security.

Skills

App Security

Threat Modelling

SDLC

Cloud Security

Tools

SAST

DAST

SCA

CI/CD Security

Container Security

IaC Security

API Security

Job description

RX Global, a RELX group company in Richmond, VA, seeks a Principal Application Security Engineer to lead security across its global technology estate. You will partner with engineering leadership to embed security by design and enable secure software delivery at scale, influencing enterprise-wide practices and tooling.

This high-visibility individual contributor role covers cloud, APIs, containers, and modern architectures, with opportunities to mentor teams and shape security strategy.