Application Security - Offensive Security Team Lead

Location: Norwich, Bristol, York or Leatherhead

Salary: Circa £90K

This is a great job for someone who...

Is an experienced Application Security or Offensive Security professional looking to shape the future of secure software development at scale.

You'll enjoy combining deep technical expertise with strategic thinking, influencing engineering teams, and helping organisations stay ahead of evolving threats across applications, cloud platforms and software supply chains.

This role offers a unique opportunity to help build and lead a growing Application Security capability, with the position expected to transition into a people leadership role from the end of 2026.

A bit about the job:

We're investing in our Application Security capability as cyber threats continue to evolve, and software supply chain security becomes increasingly important. As our Application Security - Offensive Security Team Lead, you'll play a key role in driving the strategy, direction and maturity of application security across Aviva.

You'll lead complex offensive security engagements, provide expert guidance on application security risks, and help development teams build security into every stage of the software development lifecycle. From threat modelling and secure development practices to software supply chain security and emerging risks associated with AI-assisted development, you'll help shape how we protect our applications today and in the future.

You'll also be a security champion across our engineering community, mentoring colleagues, promoting security best practices, and helping create a culture where secure development is everyone's responsibility. As the team grows, you'll take on increasing leadership responsibilities, helping develop both the capability and the people within it.

Skills and experience we're looking for:

• Deep expertise in application security, offensive security testing, software vulnerabilities and software supply chain security risks

• Strong understanding of modern Software Development Lifecycles (SDLC), secure-by-design principles, and the impact of AI and LLM-assisted software development

• Experience leading penetration testing, threat modelling exercises, security assessments or offensive security engagements within complex technology environments

• Knowledge of cloud security principles and modern application architectures, including containerised, virtualised or serverless platforms

• Ability to communicate security risk clearly, influence stakeholders at all levels, mentor colleagues, and drive security initiatives through to delivery

What you'll get for this role:

Our purpose - with you today, for a better tomorrow - is a promise we make to our colleagues too. And one of the ways we live up to that promise is by investing in you. We have so much to offer when it comes to being an Aviva colleague.

• Salary: Circa £90000 (depending on location, skills, experience, and qualifications)

• Bonus opportunity - 12% of annual salary. Actual amount depends on your performance and Aviva's

• Generous pension scheme e.g. if you put in 8%, Aviva adds 14%

• 29 days holiday plus bank holidays, and you can choose to buy or sell up to 5 days

• Aviva-funded Private Medical Benefit to help you get expert support when you need it

• Make your money go further - up to 40% discount on Aviva products, and other retailer discounts

• Up to £1,200 of free Aviva shares per year through our Matching Share Plan and share in the success of Aviva with our Save As You Earn scheme

• Brilliantly supportive policies including parental and carer's leave

• Flexible benefits to suit you, including sustainability options such as cycle to work

• Make a difference, be part of our Aviva Communities and use your 3 paid volunteering days to help others

• We take your wellbeing seriously with lots of support and tools

Aviva is for E veryone:

We're inclusive and welcome everyone - we want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if you don't , we'd still encourage you to apply. We also consider all forms of flexible working, including part-time and job shares.

We flex locations, hours and working patterns to suit our customers, business and you. Most of our people are smart working - spending around 50% of their time in our offices every week, combining the benefits of flexibility with time together with colleagues.

To find out more about working at Aviva take a look here

We interview every disabled applicant who meets the minimum criteria for the job.

Once you ' ve applied, please send us an email stating that you have a disclosed disability, and we ' ll interview you.

We'd love it if you could submit your application online. If you require an alternative method of applying, please give Kirthi a call on +447387534297 or send an email to kirthi.kanikireddy@aviva.com