Application Security Technical Lead

📋 Description

• Own and operate application security practices across the full software development lifecycle.
• Identify, assess, prioritise, and manage application security risks while partnering with
• Conduct secure code reviews, primarily across C#, .NET, and web applications, and promote secure
• Lead threat modelling exercises and security assessments across applications, development
• Adapt application security practices to different team maturity levels, balancing risk reduction
• Own, operate, and continuously optimise SAST, DAST, and SCA tooling across CI/CD pipelines.

🎯 Requirements

• 5+ years of experience in software engineering, including at least 2 years working in an
• Strong practical experience with DevSecOps principles and CI/CD environments.
• Hands-on experience implementing and managing Application Security tools, including SAST, DAST, and
• Strong experience working with Microsoft Azure environments and Azure DevOps pipelines.
• Comfortable performing secure code reviews across C#, .NET, and modern web applications.
• Strong understanding of the OWASP Top 10, secure software development, and secure design principles.

🎁 Benefits

• Opportunity to own and run a mature Application Security capability.
• Exposure to a diverse application landscape and multiple engineering teams.
• Opportunity to work in an environment with a strong focus on cybersecurity and secure software
• Culture that values continuous improvement, learning, and knowledge sharing.
• Balance of working from home and office-based collaboration.
• Inclusive working environment that welcomes people with diverse backgrounds, experiences, skills