Job Search

We are seeking an experienced Manager, Application Security to lead the development and delivery of secure software practices across a complex technology environment. This is an opportunity to shape application security strategy, influence engineering teams and help protect critical services, data and customers from evolving cyber threats.

You will manage a team of application security specialists and work closely with software engineering, architecture, infrastructure, risk and compliance colleagues. Your responsibilities will include defining security standards, maintaining an application security roadmap and embedding secure-by-design principles throughout the software development lifecycle.

You will oversee activities including threat modelling, secure code reviews, vulnerability assessment, penetration testing, dependency management and remediation tracking. You will provide practical guidance to development teams, assess security risks associated with new technologies and support the implementation of appropriate controls. The role will also involve monitoring emerging threats, reviewing security tooling and metrics, and preparing clear reports for senior stakeholders.

The successful candidate will have significant experience in application security, secure software development or a closely related discipline, including experience of leading or mentoring technical teams. You will have a strong understanding of common application vulnerabilities and frameworks such as OWASP, as well as experience with cloud technologies, APIs, CI/CD pipelines and DevSecOps practices.

Excellent communication and influencing skills are essential, along with the ability to explain technical risks to both specialist and non-specialist audiences. You should be confident balancing security requirements with delivery objectives and able to build effective relationships across a broad range of teams. Relevant professional qualifications, such as CISSP, CSSLP, CISM or equivalent experience, would be advantageous.

This role offers the opportunity to make a visible contribution to security maturity, improve engineering practices and support a collaborative culture focused on continuous improvement. Flexible working arrangements and a comprehensive benefits package are available, subject to role and location.

We are seeking an Application Security Engineering Manager to lead a talented team responsible for embedding security throughout the software development lifecycle. You will set the technical direction for application security engineering, establish pragmatic security standards, and work closely with software engineering, platform, architecture and product teams to ensure secure design and delivery. This role will combine strategic leadership with hands-on technical involvement, helping to identify risks early and enabling teams to build resilient, high-quality applications.

Your responsibilities will include managing, mentoring and developing application security engineers; defining and improving secure development processes; overseeing threat modelling, secure code reviews, vulnerability management and security testing; and supporting the adoption of automated security controls within CI/CD pipelines. You will establish meaningful metrics and reporting, prioritise remediation activity, and provide clear guidance on risk, regulatory expectations and industry best practice. You will also contribute to incident response, security architecture reviews and the development of policies, standards and training that improve security awareness across the engineering organisation.

You will bring substantial experience in application security, software engineering or a closely related discipline, together with proven experience leading or managing technical teams. Strong knowledge of secure software development, threat modelling, common application vulnerabilities, security testing tools and cloud-native technologies is essential. Experience with DevSecOps, modern development practices and programming or scripting will be highly valued. You should be an effective communicator who can explain complex risks to both technical and non-technical audiences, influence stakeholders at all levels and balance security with delivery objectives. A collaborative, practical and improvement-focused approach is important, as is the ability to work confidently in a fast-paced environment. Relevant professional certifications or a degree in computer science, cyber security or a related subject would be advantageous.

We are seeking a Software Development Manager – Application Security to lead a team responsible for building secure, scalable, and reliable software solutions. In this role, you will combine people leadership, technical direction, and security expertise to strengthen application security throughout the software development lifecycle. You will work closely with engineering, product, infrastructure, and risk teams to ensure security is embedded into design, development, testing, and deployment processes.

Your responsibilities will include managing, mentoring, and developing software engineers and security-focused specialists; setting technical priorities and delivery plans; and establishing effective engineering standards and practices. You will guide the design and implementation of application security capabilities, including secure coding frameworks, vulnerability management, threat modelling, security testing, identity and access controls, and automated security checks within CI/CD pipelines. You will also oversee the investigation and remediation of security vulnerabilities, support incident response activities, and communicate risks, progress, and recommendations to technical and senior stakeholders. A key part of the role will be promoting a practical security culture while enabling development teams to deliver efficiently.

The successful candidate will have significant experience leading software engineering or application security teams, along with a strong understanding of modern application architectures, cloud environments, APIs, databases, and DevSecOps practices. You should be confident working with security testing tools, code analysis, dependency management, and industry-standard secure development frameworks. Experience with relevant regulations, security standards, and risk management approaches is desirable. Excellent communication, coaching, prioritisation, and stakeholder management skills are essential, as is the ability to translate complex security issues into clear, actionable guidance. Relevant qualifications in computer science, software engineering, cybersecurity, or a related discipline are advantageous, as are professional certifications in application security or cloud security.

We are seeking a Manager/Senior Manager, Delivery Management – Application Security to lead the planning, coordination and delivery of application security initiatives across a complex technology environment. This role will work closely with engineering, product, architecture, infrastructure, risk and compliance teams to embed secure development practices throughout the software development lifecycle. You will translate security priorities into clear delivery plans, establish practical governance and ensure that projects achieve agreed outcomes on time, within scope and to the required quality standards.

Key responsibilities include managing a portfolio of application security programmes, projects and continuous improvement initiatives; developing roadmaps, milestones, resource plans and delivery metrics; identifying dependencies, risks, issues and remediation actions; and providing clear progress reporting to senior stakeholders. You will help coordinate activities such as secure design reviews, threat modelling, code scanning, penetration testing, vulnerability remediation, security tooling implementation and security control assurance. The role will also involve improving delivery processes, supporting prioritisation of security findings, facilitating decision-making and promoting consistent application security standards across technical teams.

The successful candidate will have significant experience in technology delivery, programme or project management, ideally within application security, cybersecurity, software engineering or a related discipline. You should be comfortable working across Agile and hybrid delivery environments and managing multiple initiatives with competing priorities. Strong stakeholder management, communication, organisation and problem-solving skills are essential, together with the ability to explain technical and security matters to both specialist and non-specialist audiences. Experience with secure software development lifecycles, DevSecOps, risk management, vulnerability management or application security tooling would be highly advantageous. Relevant professional qualifications in project management, information security or Agile delivery are desirable.