At a Glance
- Tasks: Lead application security initiatives and embed security in software development.
- Company: Join RX Global, a leader in events and exhibitions with a focus on innovation.
- Benefits: Enjoy flexible working hours, wellbeing initiatives, and study assistance.
- Other info: Be part of a diverse team committed to creating an inclusive work environment.
- Why this job: Make a real impact on global technology while ensuring secure software delivery.
- Qualifications: Experience in application security and strong understanding of modern development practices.
The predicted salary is between 72000 - 88000 £ per year.
Are you passionate about building secure software and driving security excellence across a global technology landscape? Do you enjoy partnering with engineering leaders to embed security by design and enable teams to deliver secure, innovative solutions at scale?
About our Team
RX Global aims to create unforgettable experiences for attendees and exhibitors through organizing events. Innovation, creativity, and collaboration drive the company to offer exceptional services to clients.
About the Role
We are seeking an experienced Principal Application Security Engineer to lead application security across RX's global technology estate. Reporting directly to the Chief Information Security Officer (CISO), this role will serve as the senior technical authority for application security and secure software delivery practices. The successful candidate will partner closely with engineering leadership to ensure security is embedded throughout the software development lifecycle while enabling teams to deliver business value quickly and safely. This is a highly visible individual contributor role with enterprise-wide influence across Digital, Global Business Systems, cloud platforms, APIs, integrations, and customer-facing applications. The role combines technical leadership, application security expertise, engineering engagement, threat modelling, secure-by-design governance, and application security posture management.
Responsibilities
- Lead the RX Application Security programme, defining and maintaining strategy, roadmap, standards, controls, and security maturity objectives.
- Drive adoption of Secure by Design principles by embedding security throughout the Secure Development Lifecycle (SDLC), including threat modelling and security architecture reviews.
- Own and mature the Application Security Posture Management capability, including management and optimisation of Aikido and related security tooling.
- Develop KPIs, dashboards, and reporting for engineering and executive stakeholders, while identifying opportunities for automation and continuous improvement.
- Oversee vulnerability management activities across applications and platforms, including findings from SAST, DAST, Software Composition Analysis, container security, Infrastructure as Code security, CI/CD security, API security reviews, and penetration testing.
- Partner with Engineering Directors, Architects, Product Leaders, and Software Engineers to promote secure coding, secure design, and developer-friendly security practices.
- Provide security guidance for cloud-native environments and modern architectures, including AWS, Azure, microservices, APIs, containers, serverless technologies, and SaaS platforms.
- Support governance, audit, compliance, risk assessment, and assurance activities while providing technical leadership and mentoring across engineering and security communities.
Requirements
- Significant experience in Application Security, Product Security, or Security Engineering.
- Strong understanding of modern software development methodologies and engineering practices.
- Experience implementing Secure Development Lifecycle programmes.
- Experience conducting threat modelling and architecture security reviews.
- Deep understanding of application security principles, attack techniques, and risk management.
- Hands-on experience with OWASP Top 10, SAST, DAST, SCA, Container Security, Infrastructure as Code Security, CI/CD Security, and API Security.
- Experience securing cloud-native environments, particularly AWS and Azure.
- Strong stakeholder management, communication, influencing, leadership, coaching, and mentoring skills.
Work in a Way That Works for You
We promote a healthy work/life balance across the organisation. We offer an appealing working prospect for our people. With numerous wellbeing initiatives, shared parental leave, study assistance, and sabbaticals, we will help you meet your immediate responsibilities and your long-term goals.
Working Pattern
Working flexible hours - flexing the times when you work in the day to help you fit everything in and work when you are the most productive.
About the Business
RX is a global leader in events and exhibitions, leveraging industry expertise, data, and technology to build businesses for individuals, communities, and organisations. With a presence in 25 countries across 41 industry sectors, RX hosts approximately 350 events annually. RX is committed to creating an inclusive work environment for all our people. RX empowers businesses to thrive by leveraging data-driven insights and digital solutions. RX is part of RELX, a global provider of information-based analytics and decision tools for professional and business customers.
We know your well-being and happiness are key to a long and successful career. We are delighted to offer country specific benefits. We are committed to providing a fair and accessible hiring process. If you have a disability or other need that requires accommodation or adjustment, please let us know by completing our Applicant Request Support Form or please contact 1-855-833-5120.
Criminals may pose as recruiters asking for money or personal information. We never request money or banking details from job applicants. Learn more about spotting and avoiding scams here.
Please read our Candidate Privacy Policy. We are an equal opportunity employer: qualified applicants are considered for and treated during employment without regard to race, color, creed, religion, sex, national origin, citizenship status, disability status, protected veteran status, age, marital status, sexual orientation, gender identity, genetic information, or any other characteristic protected by law.
Application Security Leader employer: RX
At RX Global, we pride ourselves on being an excellent employer, offering a dynamic work environment in Richmond or Düsseldorf that fosters creativity and strategic thinking. Our hybrid working model allows for flexibility, while our commitment to employee development ensures that you will have ample opportunities to grow your career within a collaborative and customer-focused culture. Join us to make a meaningful impact in the international events industry, supported by dedicated teams and strong partnerships.
StudySmarter Expert Advice🤫
We think this is how you could land Application Security Leader
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including RX, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through RX
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at RX. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace Application Security Leader
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at RX insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to RX that you’re committed to staying ahead in the game.
How to prepare for a job interview at RX
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at RX to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at RX.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
