Application Security Consultant

Overview

In this role you will act as a technical authority to engineering and product teams, strengthening application security across Ricoh Europe. You will lead high-risk security reviews, implement shift-left practices, and integrate security into the development lifecycle for both internal and customer-facing solutions. You’ll collaborate across IT, product, and DevOps to embed secure design practices and foster a mature security culture. This is a chance to shape secure development at scale while advancing Ricoh’s mission of a people-first, sustainable future.

Pay / Benefits

• flexible working
• wellbeing resources
• learning pathways and mentoring
• career opportunities across functions and countries
• volunteering and sustainability initiatives
• recognition programs (Imagine. Change. Awards)

Responsibilities

• Lead application security reviews for high-risk products and services
• Conduct and oversee SAST, DAST, API security, fuzz testing and architecture-level assessments
• Assess applications against the OWASP Top 10 and other security standards
• Identify vulnerabilities and translate findings into remediation plans
• Provide secure design and coding guidance throughout the development lifecycle
• Help establish and evolve a pan-European Application Security capability
• Develop and promote consistent application security methodologies, standards and best practices
• Support secure coding standards across Java, C, C++, and other languages
• Integrate security controls and automated testing into CI/CD pipelines (SAST, DAST, SCA)
• Support threat modelling and vulnerability management across products and services
• Work with developers, architects, DevOps, and product owners to embed security into workflows
• Deliver security awareness sessions and developer-focused training
• Contribute to secure AI development approaches and risk mitigation
• Monitor emerging threats and improve processes, tooling, and practices
• Explain security findings and remediation implications to non-security stakeholders
• Influence security practices across teams and geographies to standardize secure development

Key requirements

• Extensive experience in application security or secure development
• Hands-on experience conducting application security reviews
• Strong knowledge of security principles and common vulnerabilities
• Experience with SAST, DAST, and SCA tools
• Experience implementing security within CI/CD and DevSecOps
• Ability to read and understand code in languages like Java, C, C++, C#, Python
• Knowledge of secure SDLC and shift-left practices
• Experience with threat modelling (e.g., STRIDE)
• Understanding of application, API and web security
• Ability to interpret findings, reduce false positives and prioritize risk
• Clear communication of vulnerabilities and actionable recommendations
• Strong stakeholder management with engineers, architects, and product owners
• Understanding of business, regulatory, financial, and reputational risk implications

• Stakeholder management
• Ability to translate complex security concepts into practical guidance
• Willingness to challenge established practices
• SAST, DAST, and Software Composition Analysis (SCA)
• Threat modelling (STRIDE)
• CI/CD/DevSecOps integration

…