Application Security Leader

Join RX as a Principal Application Security Engineer, where you will lead application security across our global technology estate. Reporting directly to the Chief Information Security Officer (CISO), you will serve as the senior technical authority for application security and secure software delivery practices. This highly visible individual contributor role will have enterprise-wide influence and will involve technical leadership, application security expertise, engineering engagement, threat modeling, secure-by-design governance, and application security posture management.

Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security

Responsibilities

• Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
• Drive adoption of Secure by Design principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews.

Requirements

• Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, CI/CD security, API security reviews, and penetration testing.
• Significant experience in Application Security, Product Security, or Security Engineering

Experience implementing Secure Development Lifecycle programmes

• Strong understanding of modern software development methodologies and engineering practices
• Strong stakeholder management, communication, influencing, leadership, coaching, and mentoring skills
• Experience conducting threat modelling and architecture security reviews
• Experience securing cloud-native environments, particularly AWS and Azure
• Deep understanding of application security principles, attack techniques, and risk management