Principal AppSec Leader: Secure SDLC & Cloud

RELX International; Richmond (VA); On-site; USD 150,000 - 190,000; Full time

Job summary

RELX International seeks a Principal Application Security Engineer to lead security across its global technology estate. You will serve as the senior technical authority for application security, embedding secure software delivery and threat modelling across the SDLC while enabling rapid, safe delivery of business value.

You will partner with engineering leadership to promote secure coding, govern security posture, and drive maturity across AWS, Azure, APIs, and container-based environments.

Qualifications

• Extensive experience leading application security programs.
• Strong knowledge of secure software development lifecycle.
• Proven ability to influence engineering leadership and teams.

Responsibilities

• Lead the RX Application Security programme, defining strategy, roadmap, standards, controls, and maturity objectives.
• Drive Secure by Design principles within the SDLC, including threat modelling and security architecture reviews.
• Oversee vulnerability management across applications and platforms (SAST/DAST/SCA, container, IaC, CI/CD, API security, pentest).
• Partner with engineering leaders to promote secure coding and design practices.
• Develop KPIs, dashboards, and reporting for executives; identify opportunities for automation and improvement.
• Provide security guidance for cloud-native environments (AWS/Azure, microservices, containers, serverless, SaaS).

Skills

Application Security

Threat Modelling

Secure SDLC

Cloud Security

Vulnerability Management

Security Governance

Leadership

Mentoring

Tools

OWASP Top 10

SAST

DAST

SCA

Container Security

CI/CD Security

API Security

Job description

RELX International seeks a Principal Application Security Engineer to lead security across its global technology estate. You will serve as the senior technical authority for application security, embedding secure software delivery and threat modelling across the SDLC while enabling rapid, safe delivery of business value.

You will partner with engineering leadership to promote secure coding, govern security posture, and drive maturity across AWS, Azure, APIs, and container-based environments.