Application Security - Offensive Security Lead

Application Security - Offensive Security Team Lead

Location: Norwich,Bristol,Yorkor Leatherhead

Salary: Circa £90K

This isa great jobfor someone who...

Is an experienced Application Security or Offensive Security professional looking to shape the future of secure software development at scale.

You'llenjoy combining deep technicalexpertisewith strategic thinking, influencing engineering teams, and helping organisations stay ahead of evolving threats across applications, cloudplatformsand software supply chains.

This role offers a unique opportunity to help build and lead a growing Application Security capability, with the position expected to transition into a people leadership role from the end of 2026.

A bit about the job:

We'reinvesting in our Application Security capability as cyber threats continue toevolve,and software supply chain security becomes increasingly important. As our Application Security - Offensive Security Team Lead,you'llplay a key role in driving the strategy,directionand maturity of application security across Aviva.

You'lllead complex offensive security engagements,provideexpert guidance on application security risks, and help development teams build security into every stage of the software development lifecycle. From threat modelling and secure development practices to software supply chain security and emerging risks associated with AI-assisted development,you'llhelp shape how we protect our applications today and in the future.

You'llalso be a security champion across our engineering community, mentoring colleagues, promoting security best practices, and helping create a culture where secure development is everyone's responsibility. As the team grows,you'lltake on increasing leadership responsibilities, helping develop both the capability and the people within it.

Skills and experiencewe'relooking for:

• Deepexpertisein application security, offensive security testing, softwarevulnerabilitiesand software supply chain security risks

• Strong understanding of modern Software Development Lifecycles (SDLC), secure-by-design principles, and the impact of AI and LLM-assisted software development

• Experience leading penetration testing, threat modelling exercises, securityassessmentsor offensive security engagements within complex technology environments

• Knowledge of cloud security principles and modern application architectures, including containerised, virtualised or serverless platforms

• Ability to communicate security risk clearly, influence stakeholders at all levels, mentor colleagues, and drive security initiatives through to delivery

Whatyou'llget for this role:

Our purpose - with you today, for a better tomorrow - is a promise we make to our colleagues too. And one of the ways we live up to that promise is by investing in you. We have so much to offer when it comes to being an Aviva colleague.

• Salary: Circa £90000 (depending on location, skills, experience, and qualifications)

• Bonus opportunity - 12% of annual salary. Actual amount depends on your performance and Aviva's

• Generous pension scheme e.g. if you put in 8%, Aviva adds 14%

• 29 days holiday plus bank holidays, and you can choose to buy or sell up to 5 days

• Aviva-funded Private Medical Benefit to help you get expert support when you need it

• Make your money go further - up to 40% discount on Aviva products, and other retailer discounts

• Up to £1,200 of free Aviva shares per year through our Matching Share Plan and share in the success of Aviva with our Save As You Earn scheme

• Brilliantly supportive policies including parental and carer's leave

• Flexible benefits to suit you, including sustainability options such as cycle to work

• Make a difference, be part of our Aviva Communities and use your 3 paid volunteering days to help others

• We take your wellbeing seriously with lots of support and tools

Aviva is forEveryone:

We'reinclusive and welcome everyone - we want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if youdon't,we'dstill encourage you to apply. We also consider all forms of flexible working, including part-time and job shares.

We flex locations,hoursand working patterns to suit our customers,businessand you. Most of our people are smart working - spending around 50% of their time in our offices every week, combining the benefits of flexibility with time together with colleagues.

To find out more about working at Aviva take a look here

We interview every disabled applicant who meets theminimumcriteria for the job.

Onceyou’veapplied, please send us an emailstatingthat you have a disclosed disability, andwe’llinterview you.

We’dlove it if you couldsubmityour application online. If yourequirean alternative method of applying, please give Kirthi a call on +447387534297 or send an email to [email protected]