Job Search

We are seeking a Security Engineering Manager to lead application security engineering across the EMEA region. This is a hands-on leadership role responsible for building and developing a high-performing team, strengthening secure software development practices and helping engineering teams deliver resilient, secure products at scale. You will work closely with engineering, product, infrastructure, risk and compliance stakeholders to embed security throughout the software development lifecycle.

Your responsibilities will include setting the regional application security strategy, managing priorities and delivery plans, and overseeing programmes covering secure design, threat modelling, code review, vulnerability management, security testing and remediation. You will establish effective standards, guidance and metrics, while improving the adoption of security tooling and automated controls within development pipelines. The role will also involve reviewing architecture and designs, supporting incident response where application security is implicated, communicating risk to senior stakeholders and ensuring that security findings are addressed in a timely and proportionate manner. You will coach engineers and security specialists, support recruitment and performance development, and promote a culture of shared ownership for security.

The successful candidate will have substantial experience in application security, product security or software engineering, together with proven experience managing and mentoring technical teams. You should have a strong understanding of secure software development methodologies, modern application architectures, cloud environments, APIs, identity and access management, and common web and software vulnerabilities. Experience with security testing tools, DevSecOps practices, continuous integration and delivery, and vulnerability management programmes is essential. Strong communication, stakeholder management and prioritisation skills are required, as is the ability to explain complex technical risks clearly to both technical and non-technical audiences. Relevant industry certifications or demonstrable equivalent expertise would be advantageous. The role is suited to an inclusive, pragmatic leader who can balance strategic direction with practical delivery in a geographically distributed environment.

We are seeking a Principal Security Engineer (AppSec) to define and advance application security strategy across a complex technology environment. This is a senior technical leadership role for an experienced security professional who can influence engineering teams, strengthen secure development practices, and help protect products throughout their lifecycle. You will work closely with software engineers, architects, platform teams, and business stakeholders to embed security into design, development, testing, deployment, and operations.

Your responsibilities will include establishing and evolving application security standards, threat modelling methodologies, secure coding guidance, and security architecture principles. You will lead the assessment of applications and services, identify vulnerabilities and design weaknesses, and provide practical remediation advice. You will also oversee the use of security tooling across the software development lifecycle, including static and dynamic analysis, software composition analysis, secrets detection, dependency management, and cloud security controls. The role will involve reviewing security findings, prioritising risk, supporting incident investigations, and contributing to security metrics and reporting. You will help develop automated security checks within CI/CD pipelines and promote security champions, training, and knowledge-sharing initiatives across engineering.

The successful candidate will bring extensive experience in application security, product security, or a closely related discipline, together with strong knowledge of secure software development and modern engineering practices. You should be confident working with cloud-native architectures, APIs, web applications, containers, identity and access management, and common application vulnerabilities. Experience with threat modelling frameworks, security testing tools, DevSecOps practices, and relevant industry standards is highly desirable. Excellent communication and stakeholder-management skills are essential, as is the ability to balance security risk with delivery goals and explain complex technical issues to varied audiences. Relevant professional certifications or demonstrable equivalent experience would be advantageous.

We are seeking an experienced Application Security Engineer to help build secure, resilient software throughout the development lifecycle. In this role, you will work closely with software engineers, architects, DevOps specialists and product teams to identify security risks early, strengthen application controls and promote secure engineering practices. You will contribute to security initiatives across web, mobile, API and cloud-based applications, helping teams deliver reliable products without compromising usability or delivery speed.

Your responsibilities will include conducting secure code reviews, threat modelling, architecture assessments and application security testing. You will design and maintain security tooling integrated into CI/CD pipelines, analyse findings from static and dynamic analysis tools, and support vulnerability triage, remediation and risk acceptance processes. You will investigate application security incidents, assist with root-cause analysis and recommend practical improvements. The role will also involve developing security standards, guidance and reusable patterns, as well as delivering training and technical advice to engineering teams. You will help monitor emerging threats, assess new technologies and contribute to security metrics and reporting.

Applicants should have professional experience in application or product security, software development, penetration testing or a closely related discipline. You will need a strong understanding of common web and API vulnerabilities, secure software development principles, authentication and authorisation, cryptography fundamentals, cloud security and relevant security frameworks such as OWASP. Experience with programming or scripting languages such as Python, JavaScript, Java, C# or Go, together with familiarity with tools for SAST, DAST, SCA, secrets detection and dependency management, is highly desirable. Strong communication skills are essential, as you will explain complex risks to both technical and non-technical audiences. Relevant certifications and experience working in Agile or DevSecOps environments are advantageous.

We are seeking a Software Development Manager – Application Security to lead a team responsible for building secure, scalable, and reliable software solutions. In this role, you will combine people leadership, technical direction, and security expertise to strengthen application security throughout the software development lifecycle. You will work closely with engineering, product, infrastructure, and risk teams to ensure security is embedded into design, development, testing, and deployment processes.

Your responsibilities will include managing, mentoring, and developing software engineers and security-focused specialists; setting technical priorities and delivery plans; and establishing effective engineering standards and practices. You will guide the design and implementation of application security capabilities, including secure coding frameworks, vulnerability management, threat modelling, security testing, identity and access controls, and automated security checks within CI/CD pipelines. You will also oversee the investigation and remediation of security vulnerabilities, support incident response activities, and communicate risks, progress, and recommendations to technical and senior stakeholders. A key part of the role will be promoting a practical security culture while enabling development teams to deliver efficiently.

The successful candidate will have significant experience leading software engineering or application security teams, along with a strong understanding of modern application architectures, cloud environments, APIs, databases, and DevSecOps practices. You should be confident working with security testing tools, code analysis, dependency management, and industry-standard secure development frameworks. Experience with relevant regulations, security standards, and risk management approaches is desirable. Excellent communication, coaching, prioritisation, and stakeholder management skills are essential, as is the ability to translate complex security issues into clear, actionable guidance. Relevant qualifications in computer science, software engineering, cybersecurity, or a related discipline are advantageous, as are professional certifications in application security or cloud security.

We are seeking a Lead Application Security Engineer to provide technical leadership across the secure software development lifecycle. In this role, you will help shape application security strategy, establish practical security standards, and work closely with engineering, architecture, infrastructure, and product teams to embed security into the design, development, testing, and release of software. You will lead initiatives that reduce risk while enabling teams to deliver reliable, scalable, and secure applications.

Your responsibilities will include developing and maintaining application security policies, patterns, and guidance; leading threat modelling, architecture reviews, and security assessments; and supporting the identification, prioritisation, and remediation of vulnerabilities. You will oversee the effective use of security testing tools, including static and dynamic analysis, software composition analysis, penetration testing, and code review processes. You will also investigate complex security issues, advise on risk acceptance and mitigation, contribute to incident response, and produce clear reports for both technical and non-technical stakeholders. A key part of the role will be mentoring engineers and security specialists, promoting security awareness, and measuring the effectiveness of application security controls.

The successful candidate will have substantial experience in application or product security, with a strong understanding of secure coding principles, modern software architectures, APIs, cloud environments, identity and access management, and common web and mobile vulnerabilities. Experience with DevSecOps practices, CI/CD security automation, threat modelling methodologies, and recognised security frameworks such as OWASP is essential. You should be comfortable influencing senior stakeholders, balancing security with delivery objectives, and communicating complex risks clearly. Relevant professional certifications or equivalent practical experience are desirable. We are looking for a collaborative, pragmatic leader who can operate strategically while remaining hands-on when required.

We are seeking a Manager/Senior Manager, Delivery Management – Application Security to lead the planning, coordination and delivery of application security initiatives across a complex technology environment. This role will work closely with engineering, product, architecture, infrastructure, risk and compliance teams to embed secure development practices throughout the software development lifecycle. You will translate security priorities into clear delivery plans, establish practical governance and ensure that projects achieve agreed outcomes on time, within scope and to the required quality standards.

Key responsibilities include managing a portfolio of application security programmes, projects and continuous improvement initiatives; developing roadmaps, milestones, resource plans and delivery metrics; identifying dependencies, risks, issues and remediation actions; and providing clear progress reporting to senior stakeholders. You will help coordinate activities such as secure design reviews, threat modelling, code scanning, penetration testing, vulnerability remediation, security tooling implementation and security control assurance. The role will also involve improving delivery processes, supporting prioritisation of security findings, facilitating decision-making and promoting consistent application security standards across technical teams.

The successful candidate will have significant experience in technology delivery, programme or project management, ideally within application security, cybersecurity, software engineering or a related discipline. You should be comfortable working across Agile and hybrid delivery environments and managing multiple initiatives with competing priorities. Strong stakeholder management, communication, organisation and problem-solving skills are essential, together with the ability to explain technical and security matters to both specialist and non-specialist audiences. Experience with secure software development lifecycles, DevSecOps, risk management, vulnerability management or application security tooling would be highly advantageous. Relevant professional qualifications in project management, information security or Agile delivery are desirable.

We are seeking a Mobile Security IOS specialist to help protect mobile applications, devices, data and supporting services across the software development lifecycle. In this role, you will work closely with iOS engineers, architects, product teams and security professionals to identify risks and build secure, resilient mobile experiences. You will contribute to security strategy, technical standards and practical guidance while ensuring that security requirements are integrated into design, development, testing and deployment activities.

Your responsibilities will include performing secure code reviews of Swift and Objective-C applications, assessing authentication, authorisation, encryption, data storage, networking and third-party software components. You will conduct mobile application security testing, threat modelling and vulnerability assessments, investigate findings and help teams implement effective remediation. The role will also involve reviewing API and backend integrations, analysing mobile security incidents, supporting root-cause investigations and monitoring emerging threats affecting the iOS ecosystem. You will develop security controls, reusable testing approaches and clear documentation, while helping to improve secure coding practices through coaching and knowledge sharing.

Applicants should have practical experience in iOS application security, mobile threat modelling and vulnerability assessment, along with strong knowledge of Swift, Objective-C, Xcode and common iOS frameworks. Experience with application penetration testing tools, static and dynamic analysis, reverse engineering, debugging and network inspection is expected. You should understand OWASP Mobile Application Security guidance, certificate and key management, secure authentication, jailbreak risks, runtime protections and privacy-focused data handling. Familiarity with CI/CD security, automated testing and cloud-connected mobile architectures would be beneficial. Strong analytical, communication and collaboration skills are essential, as is the ability to explain complex security issues clearly to both technical and non-technical audiences.

We are seeking a Senior Application Security Engineer to help strengthen the security of modern software applications throughout their development lifecycle. In this role, you will work closely with engineering, architecture, DevOps, and product teams to embed secure-by-design principles into application development, deployment, and operations. You will contribute to security strategy, establish practical standards, and support teams in delivering resilient, secure services without compromising delivery speed or user experience.

Your responsibilities will include conducting application security assessments, threat modelling, secure code reviews, and vulnerability analysis across web, mobile, API, cloud, and distributed systems. You will design and improve security controls within CI/CD pipelines, manage and tune application security tooling, and help define effective remediation processes. You will investigate complex vulnerabilities, assess their business impact, recommend risk-based solutions, and track issues through to resolution. The role will also involve developing security guidance, reusable patterns, training materials, and developer-focused advice to promote strong security practices across the organisation. You may contribute to incident response, penetration testing coordination, security architecture reviews, and the continuous improvement of application security metrics and reporting.

To succeed in this position, you should have substantial experience in application security, software engineering, or a closely related discipline, with strong knowledge of secure development methodologies and common vulnerability classes such as those outlined by OWASP. Practical experience with threat modelling, source code analysis, dynamic testing, dependency management, cloud security, APIs, authentication, authorisation, and security automation is essential. Familiarity with programming or scripting languages such as Java, C#, Python, JavaScript, or Go is desirable, along with experience using tools such as SAST, DAST, SCA, and container security platforms. Relevant professional certifications are beneficial but not required. We value clear communication, sound judgement, curiosity, and the ability to influence technical decisions while collaborating effectively with stakeholders at all levels.

We are seeking an experienced Application Security Lead to strengthen security across the software development lifecycle and help build secure, resilient digital products. In this role, you will define and implement application security strategies, standards and practices across development teams, while acting as a trusted advisor on secure design, coding and delivery. You will work closely with engineering, architecture, product and infrastructure colleagues to embed security by design and ensure that risks are identified and managed effectively.

Your responsibilities will include leading threat modelling, secure architecture reviews, code analysis, penetration testing and vulnerability management activities. You will establish practical security requirements, improve application security tooling and processes, and support teams in remediating vulnerabilities within agreed timeframes. You will also contribute to security incident investigations, maintain risk and compliance reporting, and provide clear guidance on emerging threats, regulatory expectations and industry best practice. A key part of the role will be promoting security awareness through coaching, technical workshops and knowledge-sharing across the engineering community.

The successful candidate will have substantial experience in application security, software development or a closely related field, with a strong understanding of secure software development methodologies and common vulnerabilities such as those identified by OWASP. You will be comfortable working with cloud environments, APIs, CI/CD pipelines, source-code repositories and security testing tools. Relevant professional certifications are desirable, alongside experience leading security initiatives in complex technical environments. Strong communication, influencing and problem-solving skills are essential, as is the ability to balance robust security controls with business and delivery objectives. This is an opportunity to shape application security practices, support talented technical teams and make a measurable impact on the security of critical services.

We are seeking an experienced Application Security Architect to define and advance secure software development practices across a diverse technology environment. In this role, you will shape application security strategy, establish architectural principles, and work closely with engineering, infrastructure, product, and risk teams to ensure security is embedded throughout the software development lifecycle. You will assess existing applications and platforms, identify areas of risk, and recommend practical improvements that support both business objectives and regulatory expectations.

Your responsibilities will include designing secure application and API architectures, reviewing solution designs, and providing security guidance for cloud-native, web, mobile, and distributed systems. You will develop and maintain security standards, patterns, threat models, and reference architectures, while advising teams on identity and access management, data protection, encryption, secrets management, secure integrations, and resilience. You will also support vulnerability management by interpreting findings, prioritising remediation, and helping development teams resolve complex security issues. The role will involve contributing to security tooling and automation, including software composition analysis, static and dynamic testing, infrastructure-as-code scanning, and security controls integrated into CI/CD pipelines.

The successful candidate will have significant experience in application security, software engineering, security architecture, or a closely related discipline, with a strong understanding of secure coding principles, common attack techniques, and frameworks such as OWASP. Experience with public cloud platforms, APIs, microservices, containers, DevSecOps practices, and modern authentication protocols is highly desirable. Relevant professional qualifications or certifications are advantageous. You should be able to communicate complex technical risks clearly to both technical and non-technical audiences, influence decisions without direct authority, and build trusted relationships across teams. A pragmatic, collaborative approach and a commitment to continuous improvement are essential.