Application & Development Security Lead

Salary: £64,000 - 104,000 per year

Requirements:

• Experience in application security, software security, DevSecOps, software assurance or technical security governance.
• Strong understanding of Secure SDLC, application security and modern software development practices.
• Knowledge of CI/CD security, cloud-native environments and software supply chain risk.
• Experience working closely with engineering teams to improve security outcomes.
• Strong stakeholder management and communication skills, with the ability to influence technical and non-technical audiences.
• A pragmatic approach to balancing security, risk and delivery.
• Experience with cloud platforms such as AWS, Azure or Google Cloud.
• Knowledge of SAST, DAST, SCA or software security tools.
• Experience with AI-enabled applications and emerging software security challenges.
• Security certifications such as CISSP, CSSLP or equivalent.

Responsibilities:

• Define and evolve secure software development standards, guardrails and governance practices.
• Partner with engineering and product teams to embed security into development lifecycles and delivery processes.
• Improve visibility and management of software security risks, including vulnerabilities, insecure coding trends and dependency risks.
• Strengthen governance of software supply chains, open-source dependencies and Software Bill of Materials practices.
• Support the development of secure CI/CD pipelines through controls such as code scanning, secrets detection and release governance.
• Help shape our approach to securing AI-enabled applications, including areas such as prompt injection resilience, agent controls and data protection.
• Provide insight, reporting and challenge to ensure software security risks are understood, prioritised and effectively managed.
• Drive continuous improvements in software security maturity across the organisation.

Technologies:

• AI
• AWS
• Azure
• CI/CD
• Cloud
• DevSecOps
• Support
• Marketing
• Security

More:

We are WPP, the trusted growth partner for the worlds leading brands. We unite media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company, powered by our agentic marketing platform WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth. We work with the worlds most valuable brands and have global reach across 100+ markets, with deep local expertise. Our people are key to our success, and we are committed to fostering a culture of creativity, belonging and continuous learning. This Application & Development Security Lead role sits within our Digital Security & Risk Management team and is focused on governing secure software development across cloud-native platforms, APIs, AI-enabled applications and global engineering teams. We offer a hybrid working approach, with teams in the office around four days a week, and provide passionate people, scale and opportunity, and challenging, stimulating work.

last updated 36 week of 2026