Application Security Service Manager

You will take ownership of initiatives end to end, from initial concept and planning through implementation and operational adoption, while also supporting the coordination and continuous evolution of existing application security services. This role offers a unique blend of technical insight, project leadership, and operational excellence. Although it is not a hands-on security testing position, you will be expected to confidently navigate technical discussions, define security requirements, challenge findings when needed, and collaborate closely with engineers and security specialists to drive meaningful outcomes. If you want to make a lasting impact by enabling scalable, modern, and effective security practices across Red Bull’s digital landscape, this is your opportunity., You will also contribute to the continuous improvement of Red Bull’s security assurance services, including penetration testing, bug bounty programs, offensive security, AI security testing, and related security assessments. In doing so, you will coordinate internal experts and external partners, help define assessment scopes, review findings, and drive remediation activities that further strengthen secure software development., In close partnership with engineering, product, architecture, AI, cloud, and infrastructure teams, you will help integrate security into software development processes. At the same time, you will continuously enhance governance, operating models, KPIs, and security processes, ensuring that application security services remain aligned with Red Bull’s Global Digital Security strategy.

• University degree in Information Security, Computer Science, Information Technology, Business Informatics, or equivalent experience
• Fluent English skills, German is a plus
• At least three years of experience in application security, secure software development, DevSecOps, code security, or cybersecurity
• Proven experience leading cross-functional initiatives and projects from concept through implementation
• Profound understanding of the Secure SDLC, SAST, DAST, IAST, SCA, DevSecOps, shift-left practices, and modern application security practices as well as a good understanding of vulnerability management, secure coding, penetration testing concepts, and OWASP frameworks
• Experience in coordinating application security services (e.g. vulnerability management, penetration testing, bug bounty programs, or security assessments) and using security and collaboration platforms such as GitHub, GitLab, Wiz, Halo, Jira, Intigriti, or similar tools
• Strong technical background with the ability to discuss security concepts, define scopes, evaluate remediation approaches, and collaborate with engineering teams, combined with excellent project and stakeholder management skills
• Self-motivated, pragmatic, and passionate about improving secure software development and application security capabilities
• Travel: 0-10 %