App Security Engineer: Secure DevOps & Automation

Hargreaves Lansdown; Eastbourne; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Discretionary bonus

25 days holiday + bank holidays

Hybrid working

Pension up to 11% employer contrib.

Private medical insurance

Health care cash plans

Wellhub wellness program

Two paid volunteering days per year

Inhouse barista and deli

Job summary

Hargreaves Lansdown in Bristol is seeking an Application Security Engineer to strengthen product and service security across the SDLC. You will embed scalable security controls, drive automation, and integrate security tooling with CI/CD and code repos.

You will work with Engineering and the CISO function to align security strategy, improve processes, and support a Security Champions program. The role is full-time with hybrid working in the Bristol area.

Qualifications

• Strong experience integrating security tooling into CI/CD pipelines and engineering platforms.
• Automation and API-based integrations using Python or JavaScript or similar languages.
• Knowledge of modern software development stacks and build/deploy tools (GitHub, Gitlab CI/CD, Harness, Jenkins).
• Experience with SAST, DAST, SCA and vulnerability aggregation or ASPM platforms.
• Cloud exposure (AWS/Azure) with containerised workloads (Docker) or lightweight services (Lambda/ECS).
• Understanding CVSS/EPSS scoring and how to apply it to risk.
• Ability to explain security risks to engineers and drive remediation.
• Experience working in Agile environments with strong organizational skills.

Responsibilities

• Design, build and maintain automated security checks and guardrails embedded into developer workflows.
• Develop automation and API-based integrations to connect security tooling with CI/CD and SCM platforms.
• Implement and operationalise security tooling across engineering platforms with low friction adoption.
• Embed secure development practices and testing into delivery pipelines and templates.
• Maintain, optimise and measure effectiveness of security tools with dashboards and metrics.
• Evaluate new security tools for integration, scalability and developer experience.
• Support the Application Security Lead in strategy and tool selection.
• Build partnerships with Engineering teams and CISO to improve security processes.
• Support Security Champions programs through developer enablement and training.
• Prioritise work, meet deadlines and provide progress updates.

Skills

CI/CD security integration

Automation scripting

CI/CD tooling

AppSec tooling

Cloud & containers

Vulnerability scoring

Security awareness

Communicate risk

Agile

Process improvement

Security Champions awareness

Tools

GitHub

GitLab CI/CD

Harness

Jenkins

Docker

Lambda

ECS

Job description

Hargreaves Lansdown in Bristol is seeking an Application Security Engineer to strengthen product and service security across the SDLC. You will embed scalable security controls, drive automation, and integrate security tooling with CI/CD and code repos.

You will work with Engineering and the CISO function to align security strategy, improve processes, and support a Security Champions program. The role is full-time with hybrid working in the Bristol area.