Head of Threat Engineering & Application Security

About the role

Join Coca‑Cola Europacific Partners as a key leader within the BPT Service Delivery & Security organisation. As a member of the CISO Leadership Team, you will shape and drive the cybersecurity strategy across Europe, overseeing threat engineering and application security functions.

Key responsibilities

• Define and deliver the Threat Engineering & Application Security strategy aligned with corporate security policies.
• Provide subject‑matter expertise to the CISO Leadership Team on priorities, tooling strategy and emerging risks.
• Lead, coach and develop a high‑performing security team, ensuring technical capability and engagement.
• Act as secondary leader for SOC operations, supporting the SOC Lead when required.
• Own the end‑to‑end Application Security programme, including penetration testing, API security, secure development practices and vulnerability identification.
• Govern application security testing across critical platforms and approve solution designs for security compliance.
• Manage the lifecycle, optimisation and integration of security tooling, driving threat‑driven enhancements.
• Define AI‑security technical controls and develop automation for threat engineering and security workflows.
• Maintain security policies, monitor compliance with internal and external regulations, and lead remediation efforts.
• Oversee third‑party security assessments, supplier risk mitigation and vendor evaluations.
• Plan and report the unit’s budget, ensuring optimal investment in security solutions.

Required profile

• Proven leadership experience in security engineering or application security.
• Strong technical background in penetration testing, API security and secure development practices.
• Experience managing security tooling, threat engineering processes and automation.
• Knowledge of governance, compliance and audit requirements in a multinational environment.
• Ability to collaborate with engineering, architecture, operations and project teams.
• Budget management and vendor assessment experience.

Required skills

• Penetration testing
• API security
• Secure development practices
• Vulnerability identification and management
• Security tooling lifecycle management
• Threat engineering
• Security automation