R

RELX

Global information analytics and decision tools

Application Security Leader

Security Engineering & ArchitectureConfirmed live in the last 24 hours
Full-timeRichmond, UKNo salary listedIn-person

About the Job

Requirements

  • Significant experience in Application Security, Product Security, or Security Engineering.
  • Strong understanding of modern software development methodologies and engineering practices.
  • Experience implementing Secure Development Lifecycle programmes.
  • Experience conducting threat modelling and architecture security reviews.
  • Deep understanding of application security principles, attack techniques, and risk management.
  • Hands-on experience with the OWASP Top 10, Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), Container Security, Infrastructure as Code Security, Continuous Integration/Continuous Delivery (CI/CD) Security, and API Security.
  • Experience securing cloud-native environments, particularly AWS and Azure.
  • Strong stakeholder management, communication, influencing, leadership, coaching, and mentoring skills.

Responsibilities

  • Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
  • Drive adoption of Secure by Design principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews.
  • Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling.
  • Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying opportunities for automation and continuous improvement.
  • Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, CI/CD security, API security reviews, and penetration testing.
  • Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers to promote secure coding, secure design, and developer-friendly security practices.
  • Provide security guidance for cloud-native environments and modern architectures, including AWS, Azure, microservices, APIs, containers, serverless technologies, and SaaS platforms.
  • Support governance, audit, compliance, risk assessment, and assurance activities while providing technical leadership and mentoring across engineering and security communities.

About the Company

RELX

Global information analytics and decision tools

RELX is a global provider of information-based analytics and decision tools for professionals across scientific, technical, medical, legal, risk, business, and exhibitions industries. It operates in four segments: Scientific, Technical & Medical; Risk & Business Analytics; Legal; and Exhibitions. Its products combine large datasets, analytics, and decision-support tools to help researchers, healthcare professionals, lawyers, and business leaders make informed choices, improve productivity, and achieve better outcomes. Revenue mainly comes from subscriptions, with additional income from transactional sales and advertising. RELX differentiates itself through its deep data assets, specialized industry knowledge, and multi-segment offerings that span content, analytics, and decision-support services. The company pursues a goal of delivering trusted information and insights while supporting corporate responsibility and alignment with the UN SDGs through its products and partnerships.

Company size
1,001-5,000
Company stage
IPO
Headquarters
London, United Kingdom
Founded
1894

Recently Posted Jobs

Explore more opportunities at RELX

See more jobs