Application Security Engineer

Hargreaves Lansdown; Eastbourne; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

Discretionary bonus

25 days holiday + bank holidays

Hybrid working

Pension up to 11% employer contrib.

Private medical insurance

Health care cash plans

Wellhub wellness program

Two paid volunteering days per year

Inhouse barista and deli

Job summary

Hargreaves Lansdown in Bristol is seeking an Application Security Engineer to strengthen product and service security across the SDLC. You will embed scalable security controls, drive automation, and integrate security tooling with CI/CD and code repos.

You will work with Engineering and the CISO function to align security strategy, improve processes, and support a Security Champions program. The role is full-time with hybrid working in the Bristol area.

Qualifications

• Strong experience integrating security tooling into CI/CD pipelines and engineering platforms.
• Automation and API-based integrations using Python or JavaScript or similar languages.
• Knowledge of modern software development stacks and build/deploy tools (GitHub, Gitlab CI/CD, Harness, Jenkins).
• Experience with SAST, DAST, SCA and vulnerability aggregation or ASPM platforms.
• Cloud exposure (AWS/Azure) with containerised workloads (Docker) or lightweight services (Lambda/ECS).
• Understanding CVSS/EPSS scoring and how to apply it to risk.
• Ability to explain security risks to engineers and drive remediation.
• Experience working in Agile environments with strong organizational skills.

Responsibilities

• Design, build and maintain automated security checks and guardrails embedded into developer workflows.
• Develop automation and API-based integrations to connect security tooling with CI/CD and SCM platforms.
• Implement and operationalise security tooling across engineering platforms with low friction adoption.
• Embed secure development practices and testing into delivery pipelines and templates.
• Maintain, optimise and measure effectiveness of security tools with dashboards and metrics.
• Evaluate new security tools for integration, scalability and developer experience.
• Support the Application Security Lead in strategy and tool selection.
• Build partnerships with Engineering teams and CISO to improve security processes.
• Support Security Champions programs through developer enablement and training.
• Prioritise work, meet deadlines and provide progress updates.

Skills

CI/CD security integration

Automation scripting

CI/CD tooling

AppSec tooling

Cloud & containers

Vulnerability scoring

Security awareness

Communicate risk

Agile

Process improvement

Security Champions awareness

Tools

GitHub

GitLab CI/CD

Harness

Jenkins

Docker

Lambda

ECS

Job description

Excited to grow your career?

Our purpose is to make it easy for people to save and invest for a better future. We are looking for great people to join us, so please come and invest in YOUR future at Hargreaves Lansdown.

We know that sometimes people can be put off applying for a job if they don’t tick every box. If you’re excited about working for us and have most of the skills or experience we’re looking for, we’d love to hear from you!

About the role

As an Application Security Engineer at HL, you will play a key role in strengthening the security of our products and services. Partnering with Engineering and other security functions, you’ll embed and enhance security across the SDLC. You will help shape our security tooling strategy, drive automation to scale assurance across the business, and create reusable components and support integrations that help reduce friction for engineering teams.

This role is an opportunity to enable HL to build secure products at pace by embedding scalable, automated security controls into our SDLC whilst supporting a culture of Secure by Design.

What you’ll be doing

• Design, build and maintain automated security checks and guardrails (including policy as code where appropriate) embedded into developer workflows.
• Develop automation and API-based integrations to connect security tooling with CI/CD and Source Code Management platforms, and internal systems.
• Implement and operationalise selected security tooling across engineering platforms, ensuring low friction adoption across teams.
• Embed secure development practices and security testing into delivery pipelines, shared templates and engineering standards, supporting Shift Left and Secure by Design principles.
• Maintain, optimise and measure the effectiveness of security tools, producing dashboards and providing metrics to demonstrate impact.
• Evaluate new security tools, assessing integration, scalability and developer experience.
• Support the Application Security Lead in defining the strategy, tools and technologies.
• Build strong partnerships with Engineering teams and the CISO function to streamline and improve security processes.
• Supporting the Security Champions program at HL through developer enablement and training.
• Prioritise work effectively, meet agreed deadlines and provide clear progress updates.

About you

• Strong experience integrating security tooling into CI/CD pipelines and engineering platforms.
• Ability to develop automation and API-based integrations using at least one programming or scripting language (e.g. Python, JavaScript).
• Broad knowledge of software development languages, frameworks, source code build/deploy tools (e.g. Github, Gitlab CI/CD, Harness, Jenkins).
• Experience with common application security tooling (SAST, DAST, SCA) and vulnerability aggregation or ASPM Platforms to consolidate and prioritise findings across multiple sources.
• Hands-on experience of cloud platforms (AWS, Azure), including deploying containerised workloads (e.g. Docker) or lightweight services (e.g., Lambda, ECS) to support security automation and integrations.
• Practical understanding of vulnerability scoring frameworks such as CVSS and EPSS.
• Strong understanding of common security vulnerabilities, with the ability to keep pace with emerging threats.
• Ability to communicate security risk and support engineering teams in understanding and remediating vulnerabilities.
• Experience working in Agile environments, with strong organisational skills and attention to detail.
• Experience improving workflows and processes based on feedback.
• Awareness of and/or experience with developer-focused Security Champion programs.

Interview process

The interview process will be two stages including an introductory conversation, and a technical competency-based questions and a task.

Working Schedule

We are based in Bristol, BS1 5HL. This role is permanent, full time, 37.5 hours per week, Monday to Friday. We have returned to the office 2 days a week.

Why us?

Here at HL, we’re the UK’s number 1 investment platform for private investors, based in Bristol. For more than 40 years we’ve helped investors save time, tax and money on their investments.

To achieve our mission, we believe we have a workplace like no other, with constant learning, dynamic teams, and a great ethos. We’re steered by core values that promote service, quality, innovation, and opportunity in everything we do.

What’s on offer?

• Discretionary annual bonus* and annual pay review
• 25 days* holiday plus bank holidays and 1-day additional Christmas closure
• Option to purchase an additional 5 days holiday**
• Flexible working options available, including hybrid working
• Enhanced parental leave
• Pension scheme up to 11% employer contribution
• Income Protection and Life insurance (4 x salary core level of cover)
• Private medical insurance*
• Health care cash plans - including optical, dental, and outpatient care
• Health screening programme
• Help@hand - confidential support including mental health counselling and remote GP
• Wellhub - unlimited access to fitness providers and wellness coach sessions
• Variety of travel to work schemes with bike storage and shower facilities
• Inhouse barista and deli serving subsidised coffee and sandwiches
• Two paid volunteering days per year

* dependant on role level

** only available to select during our annual benefits window, in November each year

Hargreaves Lansdown is an inclusive employer that values diversity in its workforce. We encourage applications from all individuals without regard to race, religion, gender, sexual orientation, national origin, disability or age.

This role may also be available on a flexible working or part time basis – please ask the Recruitment & Onboarding team for more information.

Please note, we are unable to provide employment sponsorship to candidates.