{"id":2149211,"url":"https://alion.io/job/ricoh-application-security-consultant","title":"Application Security Consultant","company":{"id":50295,"name":"Ricoh","domain":"ricoh.com","url":"https://alion.io/company/ricoh-com","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Phenom","truth_index":{"grade":"A","score":100,"open_postings":5,"ghost_share":0,"stale_share":0.2,"repost_share":0,"time_to_fill_p50_days":21,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":64000,"max_usd":146000,"period":"year","method":"role_country_seniority_unknown","sample_n":140},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"C#","optional":false},{"name":"C++","optional":false},{"name":"CI/CD","optional":false},{"name":"Java","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Python","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"STRIDE","optional":false}],"status":"live","first_seen_at":"2026-09-25T00:00:00Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-29T06:37:49Z","board_verified":true,"closed_at":null,"days_open":34,"trust":{"level":"ok","repost_count":1,"flags":[],"days_open":34},"description":"About Ricoh\nA global leader in digital services, recognised for innovation, sustainability and a people-first culture. We feature in the Gartner Magic Quadrant, are listed in the Global 100 Most Sustainable Companies, and have been named one of Forbes’ World’s Best Employers 2025.\nAt Ricoh, we believe people do their best work when they feel valued and supported. We create inclusive workplaces where you can grow, contribute, and make a positive impact while helping to build a more sustainable future.\nFind your place. Transform your future\nOur purpose is centred on understanding and improving how people work. By focusing on real working experiences, we support individuals to develop their skills, realise their potential and do work that feels meaningful.\nPeople transform when they Love What They Do\nThis belief sits at the heart of The Ricoh Promise. It guides how we recruit, how we support our people, and how we work together every day, creating an environment where you can grow, feel valued and make a difference.\nWhen you join us, you are encouraged to share your ideas, challenge the way things are done, and work with others to build something better. If you are looking for a place where your voice is heard, your development is supported, and your work feels meaningful, you will feel at home at Ricoh.\nWe're looking for an Application Security Consultant to join our Cyber, Risk & Security team and play a key role in strengthening application security across Ricoh Europe.\nThis is an opportunity to work at the intersection of software engineering, cybersecurity and risk, helping our teams adopt a genuine shift-left approach and making security part of the development lifecycle from design through to deployment.\nYou'll work across both our internal IT environment and customer-facing products and services, helping protect solutions that are used by thousands of people every day and supporting the security of products delivered to customers across Europe.\nWhat you will be doing\nAs our Application Security Consultant, you'll act as a technical authority and trusted advisor to engineering and product teams.\nYou'll:\nLead application security reviews for high-risk products and services.\nConduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments.\nAssess applications against the OWASP Top 10 and other relevant security standards.\nIdentify vulnerabilities, understand their root causes and translate findings into practical remediation plans.\nProvide secure design and coding guidance throughout the development lifecycle.\nHelp establish and evolve a pan-European Application Security capability within our Secure Development Centre of Excellence.\nDevelop and promote consistent application security methodologies, standards and best practices.\nSupport secure coding standards across technologies including Java, C, C++ and other relevant languages.\nIntegrate security controls and automated testing into CI/CD pipelines, including SAST, DAST and SCA.\nSupport threat modelling and vulnerability management across products and services.\nWork closely with developers, architects, DevOps teams and product owners to embed security into their everyday workflows.\nDeliver security awareness sessions, secure coding workshops and practical training for development teams.\nHelp shape our approach to secure AI development, including risks around AI models, data handling and misuse.\nMonitor emerging application security threats and recommend improvements to our processes, tooling and development practices.\nThis is more than finding vulnerabilities\nWe're looking for someone who can go beyond identifying a security issue and explain why it matters, how it happened and what we can do differently next time.\nYou'll need to be comfortable challenging established practices while building strong relationships with engineering teams. Your ability to translate complex security concepts into practical, developer-friendly guidance will be just as important as your technical expertise.\nYou'll have the opportunity to influence security practices across multiple teams and geographies, helping create a more consistent and mature approach to secure development across Ricoh Europe.\nYou will ideally have\nYou'll bring a strong software engineering and application security foundation, with:\nExtensive experience in application security, secure development or software engineering with a security focus.\nHands-on experience conducting application security reviews.\nStrong knowledge of application security principles and common vulnerability classes.\nExperience with SAST, DAST and Software Composition Analysis (SCA) tools.\nExperience implementing security within CI/CD and DevSecOps environments.\nThe ability to read and understand code in at least one major language such as Java, C, C++, C#, Python or similar.\nKnowledge of secure software development lifecycles and shift-left security practices.\nExperience with threat modelling, such as STRIDE or similar approaches.\nUnderstanding of application, API and web security.\nExperience interpreting security findings, identifying false positives and prioritising genuine risk.\nThe ability to communicate technical vulnerabilities clearly and turn them into actionable recommendations.\nStrong stakeholder management skills, with confidence working with engineers, architects and product owners.\nAn understanding of how technical vulnerabilities translate into business, regulatory, financial and reputational risk.\nDesired:\nExperience with fuzz testing, advanced dynamic testing or manual code review.\nExperience securing APIs, microservices or distributed systems.\nExperience integrating SAST, DAST, SCA or secrets scanning into CI/CD pipelines.\nKnowledge of secure architecture patterns across cloud-native, microservices or serverless environments.\nAwareness of AI security, including model, data and prompt/model manipulation risks.\nExperience delivering developer-focused security training or workshops.\nKnowledge of frameworks such as OWASP SAMM, ASVS, NIST CSF or NIST SSDF.\nRelevant application security, cloud security or offensive security certifications.\nExperience working across multiple teams, countries or business entities.\nIn return for your commitment, you can expect\nAt Ricoh, work should feel meaningful, supportive and fulfilling. The Ricoh Promise shapes your experience through four pillars that bring our culture to life.\nLove to Connect\nYou become part of a global community built on openness, inclusion and genuine collaboration.\nAcross teams, countries and roles, you'll find people who listen, involve and encourage you - helping you feel valued and able to be yourself every day.\nLove to Grow\nYour development truly matters to us. With access to learning pathways, mentoring and career opportunities across functions and countries, you'll be supported to stretch your skills, explore new directions and stay future-ready in a changing world.\nLove to Give Back\nPurpose is part of how we work. You'll have opportunities to make a difference through volunteering, sustainability initiatives and community programmes that reflect our shared values and commitment to positive impact.\nLove to Succeed\nSuccess at Ricoh is something we pursue together. You'll benefit from fair rewards, flexible working, wellbeing resources and real recognition - including programmes such as the Imagine. Change. Awards, where colleagues celebrate each other's achievements.\nWe are an equal opportunities employer\n\nWe believe that diverse perspectives make us stronger, and we welcome applications from people of all backgrounds, identities, and experiences. Our hiring decisions are based on skills, experience and potential, and we are committed to creating a fair and inclusive recruitment process. If you require any reasonable adjustments at any stage of the recruitment journey, please let us know and we will support you to bring your best self forward.\nReady to love what you do? Apply now and help us shape what comes next.","description_format":"text","description_chars":8041,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security"],"lifecycle":[{"event":"open","at":"2026-10-09T05:07:36Z"},{"event":"close","at":"2026-10-16T01:27:59Z"},{"event":"reopen","at":"2026-10-27T18:46:35Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-29T06:20:15+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":27,"band":"fade","label":"Fading","p_open":1,"p_active":0.59,"p_room":0.45,"age_days":34,"expected_fill_days":21,"reasons":["conf:3","velocity","win:tail"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/ricoh-application-security-consultant","json_url":"https://alion.io/job/ricoh-application-security-consultant.json","meta":{"generated_at":"2026-10-29T10:26:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":15819,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":50295},"rest":"https://alion.io/mcp/rest/get_company?id=50295"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fricoh-application-security-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fricoh-application-security-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fricoh-application-security-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ricoh-application-security-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fricoh-application-security-consultant"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":2149211}},{"tool":"search_jobs","arguments":{"company":"ricoh.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":2149211},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}