Application & Development Security Lead

This role isn't about writing code day-to-day. Instead, you'll influence governance of how secure software is built, deployed and maintained across cloud-native platforms, APIs, AI-enabled applications and global engineering teams.

This is an opportunity to influence software security governance at global scale, helping shape how security supports innovation across one of the world's largest and most diverse technology environments. You'll work alongside talented security and engineering professionals while helping build secure, resilient products and platforms for the future.

What you'll be doing:

• Defineandevolvesecuresoftwaredevelopmentstandards,guardrailsandgovernancepractices.
• Partnerwithengineeringandproductteamstoembedsecurityintodevelopmentlifecyclesanddeliveryprocesses.
• Improvevisibilityandmanagementofsoftwaresecurityrisks,includingvulnerabilities,insecurecodingtrendsanddependencyrisks.
• Strengthengovernanceofsoftwaresupplychains,open-sourcedependenciesandSoftwareBillofMaterials(SBOM)practices.
• SupportthedevelopmentofsecureCI/CDpipelinesthroughcontrolssuchascodescanning,secretsdetectionandreleasegovernance.
• HelpshapeWPP'sapproachtosecuringAI-enabledapplications,includingareassuchaspromptinjectionresilience,agentcontrolsanddataprotection.
• Provideinsight,reportingandchallengetoensuresoftwaresecurityrisksareunderstood,prioritisedandeffectivelymanaged.
• Drivecontinuousimprovementsinsoftwaresecuritymaturityacrosstheorganisation.

What you'll need:

Experienceinapplicationsecurity,softwaresecurity,DevSecOps,softwareassuranceortechnicalsecuritygovernance.

StrongunderstandingofSecureSDLC,applicationsecurityandmodernsoftwaredevelopmentpractices.

KnowledgeofCI/CDsecurity,cloud-nativeenvironmentsandsoftwaresupplychainrisk.

Experienceworkingcloselywithengineeringteamstoimprovesecurityoutcomes.

Strongstakeholdermanagementandcommunicationskills,withtheabilitytoinfluencetechnicalandnon-technicalaudiences.

Apragmaticapproachtobalancingsecurity,riskanddelivery.

Nice to Have:

• Experience with cloud platforms such as AWS, Azure or Google Cloud.
• Knowledge of SAST, DAST, SCA or software security tools.
• Experience with AI-enabled applications and emerging software security challenges.
• Security certifications such as CISSP, CSSLP or equivalent.

Who you are:

You're open:We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are open-minded: to new ideas, new partnerships, new ways of working.

You're optimistic:We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We aim to create a culture in which people can do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?

#LI-Hybrid

We believe the best work happens when we're together, fostering creativity, collaboration, and connection. That's why we’ve adopted a hybrid approach, with teams in the office around four days a week. If you require accommodations or flexibility, please discuss this with the hiring team during the interview process.

WPP is an equal opportunity employer and considers applicants for all positions without discrimination or regard to particular characteristics. We are committed to fostering a culture of respect in which everyone feels they belong and has the same opportunities to progress in their careers.

Please read our Privacy Notice (https://www.wpp.com/en/careers/wpp-privacy-policy-for-recruitment) for more information on how we process the information you provide.