At a Glance
- Tasks: Drive security in software development and collaborate with diverse teams across Europe.
- Company: Ricoh, a global leader in digital services with a people-first culture.
- Benefits: Meaningful work, flexible hours, career growth, and community impact opportunities.
- Other info: Join a supportive community that values diversity and encourages innovation.
- Why this job: Make a real difference in secure software practices while growing your skills.
- Qualifications: Experience in secure SDLC, application security, and DevSecOps.
The predicted salary is between 56700 - 69300 £ per year.
About Ricoh: A global leader in digital services, recognised for innovation, sustainability and a people-first culture. We feature in the Gartner Magic Quadrant, are listed in the Global 100 Most Sustainable Companies, and have been named one of Forbes' World's Best Employers 2025. At Ricoh, we believe people do their best work when they feel valued and supported. We create inclusive workplaces where you can grow, contribute, and make a positive impact while helping to build a more sustainable future.
Our purpose is centred on understanding and improving how people work. By focusing on real working experiences, we support individuals to develop their skills, realise their potential and do work that feels meaningful.
As a Secure Development Specialist, you'll help drive a measurable shift-left approach to security, ensuring security is considered from the earliest stages of design and development rather than being treated as an afterthought. Working across engineering, architecture, product and cyber security teams, you'll develop and improve secure software development lifecycle (SDLC) practices, standards and governance. You'll combine strong technical knowledge with the ability to influence and guide teams, helping make secure development practical, scalable and embedded into everyday delivery.
Your responsibilities will include:
- Developing and maintaining secure SDLC policies, standards, processes and guidance.
- Helping define and embed a consistent SDLC operating model across multiple European entities.
- Championing secure development frameworks, including NIST SSDF, and aligning practices with OWASP SAMM, ASVS and internal security requirements.
- Defining secure development baselines, reusable controls and secure design patterns.
- Embedding security controls into CI/CD pipelines and DevOps workflows.
- Supporting engineering teams to integrate security requirements early into design and delivery.
- Defining security quality gates and acceptance criteria.
- Leading or supporting threat modelling, security reviews and risk assessments for key platforms and services.
- Providing security input into architectural decisions, patterns and reference designs.
- Supporting privacy and regulatory considerations, including input into DPIA requirements and secure design activities.
- Establishing and contributing to a Secure Development Community of Practice, supporting knowledge sharing and capability development across the organisation.
- Monitoring SDLC maturity and identifying opportunities for continuous improvement.
You will ideally have:
- Strong experience in secure software development lifecycle practices and governance.
- Experience with Agile, DevOps and modern software delivery methodologies.
- Knowledge of application security and common vulnerability classes, including the OWASP Top 10.
- Familiarity with threat modelling methodologies, such as STRIDE.
- Experience in DevSecOps and integrating security controls into CI/CD pipelines.
- Knowledge of application security tooling, including SAST, DAST and Software Composition Analysis (SCA).
- Understanding of secure coding principles and engagement with at least one major programming language ecosystem.
- Experience with API, microservices and distributed application security.
- Knowledge of software supply chain security and dependency management.
- Understanding of identity, authentication and cryptographic controls.
- Familiarity with cloud security fundamentals across Azure and/or AWS.
- Knowledge of security frameworks such as NIST SSDF, OWASP SAMM and ASVS.
In return for your commitment, you can expect:
- A supportive and fulfilling work environment.
- Access to learning pathways, mentoring and career opportunities.
- Opportunities to make a difference through volunteering and community programmes.
- Fair rewards, flexible working, wellbeing resources and recognition.
We are an equal opportunities employer. We believe that diverse perspectives make us stronger, and we welcome applications from people of all backgrounds, identities, and experiences. Our hiring decisions are based on skills, experience and potential, and we are committed to creating a fair and inclusive recruitment process.
Ready to love what you do? Apply now and help us shape what comes next.
Secure Development Manager in London employer: Ricoh
Ricoh is an exceptional employer that prioritises a people-first culture, fostering an inclusive environment where employees can thrive and make a meaningful impact. With a strong commitment to professional development, flexible working arrangements, and a focus on sustainability, Ricoh empowers its workforce to grow and succeed while contributing to a better future. Join us in a collaborative atmosphere that values your voice and encourages innovation across our European operations.
StudySmarter Expert Advice🤫
We think this is how you could land Secure Development Manager in London
✨Join Local Tech Meetups
Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at Ricoh or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!
✨Contribute to Open Source Projects
Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to Ricoh.
✨Tap into Online Developer Communities
Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like Ricoh.
✨Explore Job Boards Specifically for Tech Roles
Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like Ricoh that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!
We think you need these skills to ace Secure Development Manager in London
Some tips for your application 🫡
Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.
Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at Ricoh.
Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at Ricoh and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!
Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!
How to prepare for a job interview at Ricoh
✨Brush Up on Your Coding Skills
For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.
✨Know Your Tools and Frameworks
Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If Ricoh uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.
✨Showcase Your Projects
Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.
✨Prepare for Behavioural Questions
While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.
