Senior Application Security Manager

This is a fully remote position, open to applicants in United Kingdom, +6 more states.

📋 Description

• Take ownership of vulnerability management from start to finish, including reporting, triage, mitigation, and the long-term application security strategy.

• Develop a structured, risk-ranked approach to remediation.

• Create company-wide reporting on the vulnerability posture.

• Establish and execute the AppSec roadmap, ensuring clear delivery expectations and accountability.

• Collaborate with engineering teams to incorporate proactive security practices.

• Enhance security coverage by leveraging automation and AI.

• Mentor and develop engineers to achieve staff-level proficiency.

• Fulfill compliance requirements related to ISO27001, PCI-DSS, GDPR, and other market regulations.

• Minimize the attack surface through technical controls, policies, and AI integration.

• Contribute to Cybersecurity initiatives and help shape the 2027 KPIs.

• Foster trust with engineering teams and promote a positive security culture.

• Collaborate with DevSecOps, SecOps, Risk & Compliance, Privacy, and Legal teams.

⛳️ Requirements

• Over 10 years of experience in leading application security and broader information security strategies within a compliance-focused environment.

• Proven background as a senior security engineer transitioning into management roles.

• Strong technical expertise with a commitment to remaining actively involved.

• Demonstrated success in mentoring and developing engineers.

• Capability to uphold team accountability without micromanagement.

• Experience in risk-based vulnerability triage and prioritized remediation efforts.

• Familiarity with using AI and automation to enhance security coverage.

• Ability to influence engineering teams without formal authority.

• Comfortable working in a fast-paced, complex, and evolving setting.

• Knowledge of fintech compliance requirements is a plus.

• In-depth understanding of application security; backgrounds in DevSecOps and platform security are considered.

• Eligibility to work in the specified country is required.

• Visa sponsorship is not available.

• Applications must be submitted in English.

🏝️ Benefits

• Enjoy your own Pleo card (no more out-of-pocket expenses!).

• Lunch is provided on your workdays—either catered meals or a lunch allowance based on your local office.

• Comprehensive private healthcare options depending on your location, including Vitality, Alan, or Médis.

• 25-28 days of holiday (based on your location) plus public holidays.

• Flexible hybrid and fully remote working opportunities.

• Option to buy an additional 5 days of holiday through a salary sacrifice scheme.

• Access to free mental health and well-being support through MyndUp.

• Paid parental leave.

• Opportunities for career development through larger projects, expanded leadership roles, or skill acquisition.