Application Security Service Manager

Sits within Red Bull's Digital Security team and focuses on safeguarding custom software development and advancing application security capabilities. It involves partnering closely with security peers, engineering, development, and product teams to drive strategic initiatives, enhance security services, and embed security across the software development lifecycle. The position combines technical insight, project leadership, and operational excellence, with ownership of initiatives from concept through implementation and operational adoption.

• Lead initiatives that strengthen application security capabilities, including secure SDLC, code security, developer enablement, governance, and security tooling.
• Partner with engineering teams and area security peers to define roadmap priorities, improve processes, and deliver scalable security capabilities that support secure software development.
• Drive strategic initiatives end to end, from initial concept through implementation, rollout, and operational adoption.
• Coordinate stakeholders, vendors, technical experts, budgets, timelines, and governance structures to ensure successful delivery.
• Support the operational coordination and administration of recurring application security activities.
• Participate in the vulnerability management lifecycle for custom-developed applications, supporting vulnerability triage, remediation prioritisation, mitigation activities, and remediation tracking.
• Coordinate security-related operational tasks such as reporting, KPI tracking, and continuous service improvement in close collaboration with development teams and security specialists.
• Contribute to the continuous improvement of security assurance services, including penetration testing, bug bounty programmes, offensive security, AI security testing, and related security assessments.
• Coordinate internal experts and external partners, help define assessment scopes, review findings, and drive remediation activities that strengthen secure software development.
• Partner with engineering, product, architecture, AI, cloud, and infrastructure teams to integrate security into software development processes, enhance governance, operating models, KPIs, and security processes, and navigate technical discussions, define security requirements
• And challenge findings to ensure application security services remain aligned with Red Bull's Global Digital Security strategy.

• University degree in Information Security, Computer Science, Information Technology, Business Informatics, or equivalent experience.
• Fluent English skills.
• At least three years of experience in application security, secure software development, DevSecOps, code security, or cybersecurity.
• Proven experience leading cross-functional initiatives and projects from concept through implementation.
• Profound understanding of the Secure SDLC, SAST, DAST, IAST, SCA, DevSecOps, shift-left practices, and modern application security practices.
• Good understanding of vulnerability management, secure coding, penetration testing concepts, and OWASP frameworks.
• Experience coordinating application security services, such as vulnerability management, penetration testing, bug bounty programmes, or security assessments.
• Experience using security and collaboration platforms such as GitHub, GitLab, Wiz, Halo, Jira, Intigriti, or similar tools.
• Strong technical background with the ability to discuss security concepts, define scopes, evaluate remediation approaches, and collaborate with engineering teams.
• Excellent project and stakeholder management skills.
• Self-motivated, pragmatic, and passionate about improving secure software development and application security capabilities.

• German language skills.