Application Security Service Manager

Are you ready to help shape the future of secure software development at Red Bull? As part of our Digital Security team, you will play a key role in safeguarding custom software development and advancing our application security capabilities. Partnering closely with security peers, engineering, development, and product teams, you will drive strategic initiatives, enhance security services, and help embed security across the entire software development lifecycle.

You will take ownership of initiatives end to end, from initial concept and planning through implementation and operational adoption, while also supporting the coordination and continuous evolution of existing application security services. This role offers a unique blend of technical insight, project leadership, and operational excellence. Although it is not a hands-on security testing position, you will be expected to confidently navigate technical discussions, define security requirements, challenge findings when needed, and collaborate closely with engineers and security specialists to drive meaningful outcomes. If you want to make a lasting impact by enabling scalable, modern, and effective security practices across Red Bull’s digital landscape, this is your opportunity.

APPLICATION SECURITY CAPABILITY DEVELOPMENT

In this role, you will lead initiatives that strengthen Red Bull’s application security capabilities, including secure SDLC, code security, developer enablement, governance, and security tooling. Working closely with engineering teams and area security peers, you will help define roadmap priorities, improve processes, and deliver scalable security capabilities that support secure software development across the organization.

PROJECT DELIVERY & OPERATIONAL COORDINATION

You will drive strategic initiatives end to end, from initial concept through implementation, rollout, and operational adoption. This includes coordinating stakeholders, vendors, technical experts, budgets, timelines, and governance structures to ensure successful delivery. In addition to project-based work, you will also support the operational coordination and administration of recurring application security activities.

APPLICATION SECURITY OPERATIONS & VULNERABILITY MANAGEMENT

Part of the role involves active participation in the vulnerability management lifecycle for custom-developed applications. You will support vulnerability triage, remediation prioritization, mitigation activities, and remediation tracking, while coordinating security-related operational tasks such as reporting, KPI tracking, and continuous service improvement in close collaboration with development teams and security specialists.

SECURITY ASSURANCE

You will also contribute to the continuous improvement of Red Bull’s security assurance services, including penetration testing, bug bounty programs, offensive security, AI security testing, and related security assessments. In doing so, you will coordinate internal experts and external partners, help define assessment scopes, review findings, and drive remediation activities that further strengthen secure software development.

STAKEHOLDER MANAGEMENT & GOVERNANCE

In close partnership with engineering, product, architecture, AI, cloud, and infrastructure teams, you will help integrate security into software development processes. At the same time, you will continuously enhance governance, operating models, KPIs, and security processes, ensuring that application security services remain aligned with Red Bull’s Global Digital Security strategy.

• University degree in Information Security, Computer Science, Information Technology, Business Informatics, or equivalent experience

• Fluent English skills, German is a plus

• At least three years of experience in application security, secure software development, DevSecOps, code security, or cybersecurity

• Proven experience leading cross-functional initiatives and projects from concept through implementation

• Profound understanding of the Secure SDLC, SAST, DAST, IAST, SCA, DevSecOps, shift-left practices, and modern application security practices as well as a good understanding of vulnerability management, secure coding, penetration testing concepts, and OWASP frameworks

• Experience in coordinating application security services (e.g. vulnerability management, penetration testing, bug bounty programs, or security assessments) and using security and collaboration platforms such as GitHub, GitLab, Wiz, Halo, Jira, Intigriti, or similar tools

• Strong technical background with the ability to discuss security concepts, define scopes, evaluate remediation approaches, and collaborate with engineering teams, combined with excellent project and stakeholder management skills

• Self-motivated, pragmatic, and passionate about improving secure software development and application security capabilities

Due to legal reasons we are obliged to disclose the minimum salary according to the collective agreement for this position, which is EUR 2,535 gross per month. However, our attractive compensation package is based on market-oriented salaries and is therefore significantly above the stated minimum salary. As an employer, we value diversity and support people in developing their potential and strengths, realizing their ideas and seizing opportunities. We believe passionately that employing a diverse workforce is central to our success. We welcome applications from all members of society irrespective of age, skin colour, religion, gender, sexual orientation or origin.