Application Security Service Manager

About the role

As part of Red Bull's Digital Security team, you will help safeguard custom software development and advance application security. You will partner with security peers, engineering, development and product teams to drive strategic initiatives and embed security across the software development lifecycle, taking ownership of initiatives from concept through implementation and operational adoption. It is not a hands-on security testing position, but you must confidently navigate technical discussions and define security requirements.

Key responsibilities

• Lead initiatives that strengthen application security capabilities, including secure SDLC, code security, developer enablement, governance and security tooling
• Drive projects end to end, coordinating stakeholders, vendors, budgets, timelines and governance
• Support vulnerability management: triage, prioritisation, mitigation, tracking, reporting and KPI monitoring
• Contribute to security assurance services such as penetration testing, bug bounty programmes, offensive security and AI security testing
• Integrate security into software development with engineering, product, architecture, AI, cloud and infrastructure teams, and improve governance, operating models and KPIs

Required profile

• University degree in Information Security, Computer Science, Information Technology, Business Informatics or equivalent experience
• At least three years of experience in application security, secure software development, DevSecOps, code security or cybersecurity
• Proven experience leading cross-functional initiatives from concept through implementation
• Fluent English; German is a plus

Required skills

• Secure SDLC, SAST, DAST, IAST, SCA, DevSecOps, shift-left practices and vulnerability management
• Security and collaboration platforms such as GitHub, GitLab, Wiz, Halo, Jira, Intigriti or similar