Your Role

Your role is to establish and lead an Application Security (AppSec) programme within the Product and Technology department, acting as an evangelist for AppSec and a trusted advisor to engineers and managers alike.

As a member of the core security team, you will assess application design proposals and identify opportunities to help our engineers build secure products.

You will own and redesign the existing security training programme to better equip engineers with the knowledge needed to develop secure applications. You will also create a Security Champions programme to scale and embed a DevSecOps mindset across Product and Technology.

What You’ll Be Responsible For

• Secure the SDLC: Integrate security tooling (e.g. SAST, DAST and dependency scanning) into CI/CD pipelines and IDEs. Automate and optimise checks so teams can identify and fix issues early and efficiently.
• Threat Modelling & Secure Design: Collaborate with product and engineering teams during the design phase to conduct threat modelling sessions and pre-implementation security reviews.
• Code & Architecture Reviews: Guide developers on secure coding practices, perform targeted code reviews and help resolve vulnerabilities through actionable remediation support.
• Vulnerability Lifecycle Management:
  • Identify, triage, track and report vulnerabilities across internal and external applications and systems.
  • Collaborate with engineers to close security gaps efficiently.
  • Support the bug bounty process by validating findings.
  • Present vulnerability management reports to department heads.
• AI/ML & LLM Security:
  • Provide guidance on the secure development of AI/LLM-powered features.
  • Help teams manage risks such as prompt injection, model misuse and data leakage.
  • Lead threat modelling exercises for AI components and advise on secure integration patterns.
• Incident Response Collaboration: Support the investigation and root cause analysis of application-layer incidents. Contribute to post-incident reviews and longer-term mitigation strategies.
• Security Culture & Enablement:
  • Act as a security champion for development teams.
  • Be an enthusiastic and vocal advocate for application security across all engineering and product teams.
  • Nurture and report on our application security training programme for code contributors.
  • Deliver workshops and technical deep-dives on secure development practices.
  • Contribute to playbooks, documentation and internal standards.
• Research & Innovation:
  • Stay ahead of industry threats and attack trends.
  • Propose and test innovative ideas to reduce risk across our software supply chain and platforms.
  • Showcase how to use AI and AI-powered tools to enhance productivity and improve our security posture.

Your Skills

• 5+ years of experience in application security, product security or related technical roles.
• Experience working directly with software engineers and product managers to secure web applications.
• Experience working within an Agile environment.
• Good working proficiency in spoken and written English.
• Excellent interpersonal skills and the ability to communicate clearly at every level of the organisation.
• Strong mentorship and training skills.
• Ability to work across two different departments with multiple touchpoints.
• Coding proficiency in languages such as JavaScript, PHP or Python.
• Experience with cloud-native environments (AWS), containers and Terraform.
• Hands-on experience with DAST, SAST and SCA tools, reporting and dashboarding platforms.

Our Offer

• Flexi-Week: We prioritise your mental health and wellbeing by offering you a four-day Flexi-Week (with one lighter or completely disconnected day per week) at full pay, with no reduction to your annual holiday allowance.
• Flexi-Office: We offer an international culture and flexibility through our hybrid/remote working scheme, designed to foster a culture of mutual trust and working flexibility.
• Work Expense Contribution & Remote Working Furniture: You will receive a monthly allowance to cover part of your running costs, as well as a furniture package to support you in setting up a comfortable workspace when working from home.
• Health & Wellbeing: With our support and access to various initiatives and sports offers, you can focus on your mental and physical wellbeing.
• Development: We’ve built our extensive training suite, Awin Academy, to cover a wide range of skills that support your professional and personal growth, with training conveniently packaged to help your overall development.
• Appreciation: Thank and reward colleagues by sending them a voucher through our peer-to-peer recognition programme.

We are hiring in multiple countries for this role. Additional benefits, including health and wellbeing offerings, will be discussed during the initial interview.

Life at Awin

Established in 2000, Awin is proud of its dynamic, social and inclusive culture.

Like all businesses, we’ve had to adapt and nurture our culture in a virtual environment. Our virtual Life @ Awin hub brings colleagues from across the globe together through various social activities.

Diversity & Inclusion

Diversity and Inclusion are paramount to us, and we proudly pursue and hire diverse team members. We champion uniqueness and authenticity; this is who we are at our core.

Our network of affiliate partnerships is diverse and transparent, as are the employees powering our vision to build the world’s leading open partner ecosystem. We welcome all backgrounds, identities and experiences.

If you need support at any point during the application or interview process, please let us know.

About Axel Springer

Awin is part of the Axel Springer group. Learn more at axelspringer.com/en/, and explore the Axel Springer Essentials.

Apply Now

Apply now to begin the next stage of your career at a progressive company that supports both your professional and personal development.