WPP

3 weeks ago

Product, Application and Offensive Security Lead

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 4 hours agoStatus: Live

Job Summary

Embed security across DTS products and platforms as a hands-on security engineering lead. Review product designs and APIs, run threat models and security design reviews, and coordinate offensive testing including penetration tests and red/purple team exercises. Own practical SDLC security adoption (SAST/DAST/SCA, scanning, vulnerability triage) and provide adversarial assurance for AI and agentic workflows, helping teams remediate issues without slowing delivery.

Location: United Kingdom

Workplace: Hybrid

Employment Type: Full time

Job Function: Administration & Executive Assistance

Seniority: Sr. Manager level

Key Responsibilities

•Provide hands-on security support across DTS products and engineering teams, including reviewing designs, APIs, services, and integrations.
•Embed security into the SDLC by defining secure engineering standards and supporting secure coding and CI/CD security controls.
•Run threat modelling sessions and security design reviews, assessing authentication/authorization, API exposure, data flows, and abuse cases.
•Coordinate offensive and adversarial testing, including hands-on security testing and external penetration tests, and support red/purple team exercises.
•Perform vulnerability triage and remediation support, validating fixes and feeding material risks into governance and risk tracking.

Pay and Benefits

Schedule:4-Day Week

Key Requirements

•Strong hands-on experience in application security, product security, offensive security, security engineering, or penetration testing.
•Good understanding of modern software engineering, APIs, SaaS platforms, distributed systems, and cloud-native applications.
•Experience running threat modelling and secure design reviews.
•Practical knowledge of application and API security risks (authentication, authorization, tenant isolation, injection, data leakage, privilege escalation, supply chain risk).
•Experience using security testing tools and techniques across web applications, APIs, cloud services, and CI/CD pipelines, including SAST/DAST/SCA and scanning workflows.

Skills:CommunicationStakeholder managementPragmatism

Languages:English

Tech Stack:APIsCI/CDSASTDASTSCASecrets scanningDependency scanningContainer scanningSecurity design reviewsThreat modellingPenetration testingRed teamPurple teamAIAgentic workflows

Company Brief

WPP

Global marketing and communications services group offering advertising, media investment management, branding, public relations, and digital services to multinational clients across industries.

Industry: Advertising Media Groups

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: London, United Kingdom

Founded: 1971

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

WPP