Application Security Manager

A growing technology organisation is looking for an Application Security Manager to bring structure and governance to how its software development function builds and ships code. This is not a hands-on code review role. Instead, you'll own the checkpoints that ensure the software development lifecycle (SDLC) is compliant with the organisation's security and governance requirements, while working closely with developers to lift baseline secure coding hygiene.

You'll also bring the organisation's application security thinking into the AI era: helping the business understand how to secure AI-powered tools such as chatbots, and how to guard against AI itself being used as an attack vector, for example an autonomous agent scanning internal infrastructure.

This is as much an influencing role as a technical one. You'll be working with a development team that has grown fast and picked up some risky habits along the way (hardcoded credentials among them), so the ability to bring people with you, rather than police them, matters as much as your technical grounding.

Key responsibilities

• Own and enforce SDLC governance checkpoints, ensuring development practices meet the organisation's security and compliance standards
• Partner with the software development team to close out common vulnerabilities and poor practices (such as hardcoded credentials), improving secure coding habits over time
• Advise on the security implications of deploying AI tools internally and externally, including customer- or employee-facing chatbots
• Assess and mitigate risks from AI as a threat vector, including unauthorised or unintended AI agent access to internal systems
• Act as the security governance point of contact for development teams, translating requirements into practical, adoptable guidance
• Report on SDLC compliance status and emerging AI-related risk to relevant stakeholders

About you

• Solid grounding in application security and SDLC governance; you do not need to read or review code line by line
• Working knowledge of AI security considerations: securing AI applications such as chatbots, and understanding AI-related threat vectors
• Comfortable engaging developers directly on security practice without creating friction, strong emotional intelligence and stakeholder management skills are essential
• Open to candidates at assistant manager level and above; this is not a role that requires deep seniority, more the right blend of technical grounding and influencing skill