Application Security Consultant

Salary: £62,000 - 102,000 per year

Requirements:

• Extensive experience in application security, secure development or software engineering with a security focus.
• Hands-on experience conducting application security reviews.
• Strong knowledge of application security principles and common vulnerability classes.
• Experience with SAST, DAST and Software Composition Analysis (SCA) tools.
• Experience implementing security within CI/CD and DevSecOps environments.
• The ability to read and understand code in at least one major language such as Java, C, C++, C#, Python or similar.
• Knowledge of secure software development lifecycles and shift-left security practices.
• Experience with threat modelling, such as STRIDE or similar approaches.
• Understanding of application, API and web security.
• Experience interpreting security findings, identifying false positives and prioritising genuine risk.
• The ability to communicate technical vulnerabilities clearly and turn them into actionable recommendations.
• Strong stakeholder management skills, with confidence working with engineers, architects and product owners.
• An understanding of how technical vulnerabilities translate into business, regulatory, financial and reputational risk.
• Experience with fuzz testing, advanced dynamic testing or manual code review.
• Experience securing APIs, microservices or distributed systems.
• Experience integrating SAST, DAST, SCA or secrets scanning into CI/CD pipelines.
• Knowledge of secure architecture patterns across cloud-native, microservices or serverless environments.
• Awareness of AI security, including model, data and prompt/model manipulation risks.
• Experience delivering developer-focused security training or workshops.
• Knowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF.
• Relevant application security, cloud security or offensive security certifications.
• Experience working across multiple teams, countries or business entities.

Responsibilities:

• Lead application security reviews for high-risk products and services.
• Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments.
• Assess applications against the OWASP Top 10 and other relevant security standards.
• Identify vulnerabilities, understand their root causes and translate findings into practical remediation plans.
• Provide secure design and coding guidance throughout the development lifecycle.
• Help establish and evolve a pan-European Application Security capability within our Secure Development Centre of Excellence.
• Develop and promote consistent application security methodologies, standards and best practices.
• Support secure coding standards across technologies including Java, C, C++ and other relevant languages.
• Integrate security controls and automated testing into CI/CD pipelines, including SAST, DAST and SCA.
• Support threat modelling and vulnerability management across products and services.
• Work closely with developers, architects, DevOps teams and product owners to embed security into their everyday workflows.
• Deliver security awareness sessions, secure coding workshops and practical training for development teams.
• Help shape our approach to secure AI development, including risks around AI models, data handling and misuse.
• Monitor emerging application security threats and recommend improvements to our processes, tooling and development practices.

Technologies:

• AI
• API
• C#
• CI/CD
• Cloud
• DevSecOps
• DevOps
• Support
• Java
• OWASP
• Python
• Security
• Serverless
• Web
• microservices

More:

We are Ricoh, a global leader in digital services known for innovation, sustainability and a people-first culture. We are recognised in the Gartner Magic Quadrant, listed in the Global 100 Most Sustainable Companies and named one of Forbes Worlds Best Employers 2025. Our Cyber, Risk & Security team is hiring an Application Security Consultant to strengthen application security across Ricoh Europe, working across our internal IT environment and customer-facing products and services. We offer a global community built on openness and inclusion, access to learning pathways and mentoring, opportunities to contribute through volunteering and sustainability initiatives, and flexible working, wellbeing resources and fair rewards. We are an equal opportunities employer and welcome applications from people of all backgrounds, identities and experiences.

last updated 34 week of 2026