Application & Development Security Lead

WPP — London, GB — inconnu

What our tracking knows about this posting

Published on 30 July 2026 · first appeared in our records on 1 September 2026.

Stable posting: first seen on 1 September 2026, with no abnormal reposting.

This posting shows no salary — 29% of open autre postings in GB do.

View the posting at the employer Have my resume reviewed for this job
<div class="content-intro"><p><strong>WPP is the trusted growth partner for the world’s leading brands.&nbsp;</strong></p> <p><strong>We unite cutting-edge media intelligence and data solutions, world-class creativity, next-generation production, transformative enterprise solutions and expert strategic counsel in a single company – powered by exceptional talent and our agentic marketing platform, WPP Open, to help our clients navigate change, capture opportunity and deliver transformational growth.&nbsp;</strong><br><strong>&nbsp;</strong><br><strong>We work with the world's most valuable brands and have global reach across 100+ markets, with deep local expertise.</strong><br><strong>&nbsp;</strong><br><strong>Our people are the key to our success. We're committed to fostering a culture of creativity, belonging and continuous learning, attracting and developing the brightest talent, and providing exciting career opportunities that help our people grow.&nbsp;</strong><br><strong>&nbsp;</strong><br><strong>For more information, visit <a href="https://eur02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwpp.com%2F&amp;data=05%7C02%7CErica.Durr%40wpp.com%7C9bf4566a65bc46a48ac008de749116ea%7C150b5e663d884dee83f6ed149b727a00%7C0%7C0%7C639076363668176216%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&amp;sdata=Q9juosud56XGLThSFZ1NpPZd6FXpJPxV74OeRZWoh%2B4%3D&amp;reserved=0" target="_blank">WPP.com.</a></strong><br><strong>&nbsp;</strong></p></div><p><span style="text-decoration: underline;"><strong>Why we're hiring:</strong></span></p> <p>&nbsp;</p> <p>We're looking for an <span data-teams="true">Application &amp; Development Security Lead</span> to help shape and strengthen secure software development governance across one of the world's largest technology and creative ecosystems. Working within WPP's Digital Security &amp; Risk Management team, you'll partner with engineering, product and platform teams to govern secure-by-design ways of working, improve software security governance, and provide oversight across modern development environments.</p> <p>This role isn't about writing code day-to-day. Instead, you'll influence governance of how secure software is built, deployed and maintained across cloud-native platforms, APIs, AI-enabled applications and global engineering teams.&nbsp;</p> <p>This is an opportunity to influence software security governance at global scale, helping shape how security supports innovation across one of the world's largest and most diverse technology environments. You'll work alongside talented security and engineering professionals while helping build secure, resilient products and platforms for the future.</p> <p><span style="text-decoration: underline;"><strong>What you'll be doing:</strong></span></p> <div> <ul> <li><span class="___1cs5bdp f1w7gpdv f5p0z4x">Define</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">evolve</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">secure</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">software</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">development</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">standards,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">guardrails</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">governance</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">practices.</span></li> <li><span class="___1cs5bdp f1w7gpdv f5p0z4x">Partner</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">with</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">engineering</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">product</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">teams</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">to</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">embed</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">security</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">into</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">development</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">lifecycles</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">delivery</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">processes.</span></li> <li><span class="___1cs5bdp f1w7gpdv f5p0z4x">Improve</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">visibility</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">management</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">of</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">software</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">security</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">risks,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">including</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">vulnerabilities,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">insecure</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">coding</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">trends</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">dependency</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">risks.</span></li> <li><span class="___1cs5bdp f1w7gpdv f5p0z4x">Strengthen</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">governance</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">of</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">software</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">supply</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">chains,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">open-source</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">dependencies</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">Software</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">Bill</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">of</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">Materials</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">(SBOM)</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">practices.</span></li> <li><span class="___1cs5bdp f1w7gpdv f5p0z4x">Support</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">the</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">development</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">of</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">secure</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">CI/CD</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">pipelines</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">through</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">controls</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">such</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">as</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">code</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">scanning,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">secrets</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">detection</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">release</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">governance.</span></li> <li><span class="___1cs5bdp f1w7gpdv f5p0z4x">Help</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">shape</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">WPP's</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">approach</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">to</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">securing</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">AI-enabled</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">applications,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">including</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">areas</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">such</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">as</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">prompt</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">injection</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">resilience,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">agent</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">controls</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">data</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">protection.</span></li> <li><span class="___1cs5bdp f1w7gpdv f5p0z4x">Provide</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">insight,</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">reporting</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">and</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">challenge</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">to</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">ensure</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">software</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">security</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">risks</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">are</span> <span class="___1cs5bdp f1w7gpdv f5p0z4x">un