Aviva
Application Security - Offensive Security Team Lead

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Application Security - Offensive Security Team Lead
Location: Norwich, Bristol, York or Leatherhead
Salary: Circa £90K
About the Role
This is a great job for someone who...
- Is an experienced Application Security or Offensive Security professional looking to shape the future of secure software development at scale.
You'll enjoy combining deep technical expertise with strategic thinking, influencing engineering teams, and helping organisations stay ahead of evolving threats across applications, cloud platforms and software supply chains.
This role offers a unique opportunity to help build and lead a growing Application Security capability, with the position expected to transition into a people leadership role from the end of 2026.
A Bit About the Job
We're investing in our Application Security capability as cyber threats continue to evolve, and software supply chain security becomes increasingly important.
As our Application Security – Offensive Security Team Lead, you'll play a key role in driving the strategy, direction and maturity of application security across Aviva.
- Lead complex offensive security engagements
- Provide expert guidance on application security risks
- Help development teams build security into every stage of the software development lifecycle
From threat modelling and secure development practices to software supply chain security and emerging risks associated with AI-assisted development, you'll help shape how we protect our applications today and in the future.
You'll also be a security champion across our engineering community, mentoring colleagues, promoting security best practices, and helping create a culture where secure development is everyone's responsibility.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
As the team grows, you'll take on increasing leadership responsibilities, helping develop both the capability and the people within it.
Skills and Experience We're Looking For
- Deep expertise in application security, offensive security testing, software vulnerabilities and software supply chain security risks
- Strong understanding of modern Software Development Lifecycles (SDLC), secure-by-design principles, and the impact of AI and LLM-assisted software development
- Experience leading penetration testing, threat modelling exercises, security assessments or offensive security engagements within complex technology environments
- Knowledge of cloud security principles and modern application architectures, including containerised, virtualised or serverless platforms
- Ability to communicate security risk clearly, influence stakeholders at all levels, mentor colleagues, and drive security initiatives through to delivery
What You'll Get for This Role
- Salary: Circa £90000 (depending on location, skills, experience, and qualifications)
- Bonus opportunity – 12% of annual salary. Actual amount depends on your performance and Aviva's
- Generous pension scheme e.g. if you put in 8%, Aviva adds 14%
- 29 days holiday plus bank holidays, and you can choose to buy or sell up to 5 days
- Aviva-funded Private Medical Benefit to help you get expert support when you need it
- Make your money go further – up to 40% discount on Aviva products, and other retailer discounts
- Up to £1,200 of free Aviva shares per year through our Matching Share Plan and share in the success of Aviva with our Save As You Earn scheme
- Brilliantly supportive policies including parental and carer's leave
- Flexible benefits to suit you, including sustainability options such as cycle to work
- Make a difference, be part of our Aviva Communities and use your 3 paid volunteering days to help others
- We take your wellbeing seriously with lots of support and tools


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Aviva is for Everyone
We're inclusive and welcome everyone – we want applications from all backgrounds and experiences. Excited but not sure you tick every box? Even if you don't, we'd still encourage you to apply. We also consider all forms of flexible working, including part-time and job shares.
We flex locations, hours and working patterns to suit our customers, business and you. Most of our people are smart working – spending around 50% of their time in our offices every week, combining the benefits of flexibility with time together with colleagues.
To find out more about working at Aviva take a look here.
We interview every disabled applicant who meets the minimum criteria for the job.
Once you’ve applied, please send us an email stating that you have a disclosed disability, and we’ll interview you.
We’d love it if you could submit your application online. If you require an alternative method of applying, please give Kirthi a call on +447387534297 or send an email to kirthi.kanikireddy@aviva.com
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location