Manager Application Security

Who Are We

Hansen Technologies is a leading global provider of software and services that enable organisations to transform customer experiences and streamline critical business processes. With a rich history of innovation and a footprint that spans over 80 countries, Hansen empowers utilities, energy, and communications companies to thrive in an ever-evolving digital landscape. Our commitment to excellence, customer focus, and collaborative culture makes Hansen a place where passionate professionals can make a meaningful impact, drive real change, and help shape the future of industries worldwide.

We are proud to be an equal opportunities employer. Hansen prides itself on celebrating diversity and is committed to creating an inclusive environment for all employees, even extending this to how we work with our customers, partners, and suppliers. We welcome applications from all qualified candidates, regardless of age, disability, gender identity or expression, marital status, race, ethnicity, religion or belief, sexual orientation, or any other protected characteristic. If you require any adjustments or accommodation during the recruitment process, please let us know.

Why This Role Matters

Secure. Automate. Integrate. Enable.

As Manager, Application Security based in Hammersmith, you’ll lead the technical development and maturity of Hansen’s Application Security capability. This is a senior, hands-on engineering role focused on strengthening security across applications, APIs, cloud-native services, development pipelines, and the wider software delivery lifecycle.

This opportunity is particularly suited to an experienced DevSecOps or security engineering professional who wants to move fully into Application Security while maintaining a strong technical focus. You’ll have the opportunity to influence how secure software is designed, developed, tested, and delivered across a global product environment.

Important: Please note that this role does not offer visa sponsorship. Applicants must already have the right to work in the UK without requiring current or future sponsorship.

What You’ll Do

• Own and continuously improve AppSec capabilities, including SAST, DAST, software composition analysis, container scanning, infrastructure-as-code scanning, and secrets detection.

• Configure and tune security policies, rules, tests, and guardrails to reduce false positives and provide actionable results for engineering teams.

• Design and build integrations, plugins, connectors, and automated workflows across AppSec platforms, engineering systems, ticketing tools, and vulnerability-management technologies.

• Embed automated, risk-based security testing and controls into CI/CD pipelines and modern software delivery workflows.

• Apply AI-assisted development and security capabilities to improve coding, detection, analysis, triage, prioritisation, and remediation guidance.

• Partner with developers and technical leads to explain security findings, identify practical solutions, and validate remediation.

• Create reusable secure-development guidance, engineering patterns, reference implementations, and practical examples.

• Provide hands-on security input for higher-risk application designs, APIs, cloud-native services, and architectural changes.

• Conduct or support threat modelling, secure code reviews, technical assessments, and penetration-testing activities where specialist involvement is required.

• Contribute to Product Security roadmaps, technical standards, security metrics, and targeted Security Champions initiatives.

What You Bring

• Significant hands-on experience in DevSecOps, Application Security, Product Security, platform security, software engineering, or security engineering.

• A strong coding or scripting background, with the ability to build maintainable security integrations, plugins, connectors, and automation.

• Practical experience working with APIs, source control, CI/CD pipelines, and modern software delivery practices.

• Deep knowledge of AppSec technologies, including the implementation, operation, integration, and tuning of SAST, DAST, SCA, and related capabilities.

• Experience integrating application security technologies with vulnerability-management or exposure-management platforms and engineering workflows.

• Experience securing applications, APIs, cloud-native services, containers, and infrastructure as code.

• Experience using AI-assisted coding or security tools, supported by sound judgement around validation, data handling, and secure use.

• The technical credibility to collaborate effectively with software engineers, platform teams, architects, product leaders, and senior security stakeholders.

• A pragmatic and enabling mindset, with a focus on measurable security outcomes rather than theory or compliance activity alone.

•

Nice to Have

• Previous experience as a DevSecOps Lead, Application Security Lead, Product Security Engineer, Security Engineering Lead, or senior software or platform engineer with substantial security responsibilities.

• Coding or scripting capability in languages such as Python, Java, JavaScript/TypeScript, C#, Go, PowerShell, or Bash.

• Experience with GitHub, GitLab, Azure DevOps, Jenkins, or comparable CI/CD ecosystems.

• Experience working with Microsoft Azure, AWS, Kubernetes, and containerised environments.

• Practical knowledge of OWASP Top 10, OWASP ASVS, OWASP SAMM, the NIST Secure Software Development Framework, and threat-modelling methodologies.

• Experience within enterprise software, SaaS, utilities, energy, or communications environments.

• Relevant certifications such as CSSLP, GIAC secure-software credentials, OSCP, AWS Security Specialty, or Microsoft Azure security certifications, although equivalent practical experience is equally valued.

Benefits and Perks

Join us for a rewarding career with competitive compensation, leave entitlements, health coverage, and financial security. Enjoy work-life balance, growth, and recognition for your exceptional performance. Our team will unveil the intricacies of our benefit package during the selection process.