Application Security Engineer

Bupa; Staines-upon-Thames; Hybrid; GBP 67,000 - 84,000; Full time

Benefits offered by this job

25 days holiday

Bupa health insurance

Enhanced pension plan

Onsite gyms or discounts

Online discounts

Job summary

Bupa is seeking an Application Security Engineer to provide technical support for secure development tooling across Bupa Global, India and UK Market Units. You will oversee implementation and operation of security tooling to keep products secure throughout their lifecycle.

You will embed security into development pipelines, drive continuous improvements in controls, and align platforms with GDPR, ISO 27001 and NIST standards, while supporting internal and external assurance activities.

Qualifications

• Experience designing, implementing and operating secure development processes.
• Knowledge of SCA, SAST, DAST and other app security tooling.
• Experience integrating security tooling into CI/CD pipelines.
• Demonstrated ability to communicate complex security concepts to technical and non-technical stakeholders.

Responsibilities

• Design, configure, develop, integrate, deploy and maintain secure development technologies.
• Integrate security tooling with development pipelines and enterprise architecture.
• Embed app security into delivery pipelines and manage DevOps controls.
• Ensure compliance with GDPR, ISO 27001, and NIST standards; provide evidence/reports.
• Monitor tooling, investigate high-risk issues, and drive automation improvements.

Skills

SCA

SAST

DAST

App security

CI/CD

Automation

Terraform

PowerShell

Python

REST APIs

CISSP/CISM/CISA

Tools

MS Entra

Job description

Job Description

Application Security Engineer Manchester, Staines or London Permanent Hybrid up to 3 days WFH

Salary from: £67.3k - £84.1k + 10% bonus + fantastic benefits

37.5 hours per week

We consider all types of flexibility, including locations, hours and working patterns.

We make health happen At Bupa, we’re passionate about technology.

With colleagues, customers, patients and residents in mind you’ll have the opportunity to work on innovative projects and make a real impact on their lives.

Right from the start you’ll become part of our digital strategy, joining us on our journey and developing yourself along the way.

As Application Security Engineer you will provide technical support for the design, development, testing, integration and maintenance of Application Security tooling across the Bupa Global, India and UK Market Units.

You will act as subject matter expert using your technical skill and expertise to support and oversee the implementation and operation of Application Security technology to ensure that Bupa developed products are secure throughout their lifecycle.

How you’ll help us make health happen:

• Design, configure, develop, integrate, deploy and maintain secure development technologies
• Integrate Application Security tooling with our development pipelines, products and enterprise architecture (MS Entra etc)
• Develop and embed application security into the development delivery pipelines
• Implement a product management approach to drive continuous improvement in controls, including infrastructure as code, CI\CD and DevOps
• Ensure that Application Security platforms are aligned to evolving regulatory and security requirements, including GDPR, ISO 27001, and NIST standards
• Support compliance and assurance activity by 1LOD, 2LOD, 3LOD and external by maintaining and providing necessary evidence and reports
• Monitor Application Security tooling to ensure security and availability.
• Investigate Application Security issues which pose a high risk and elevate appropriately
• Identify and deliver automation and optimisation in delivery of Application Security tooling
• Act as Application Security subject matter expert to advise technical and non-technical team colleagues on best practice application security practices

You Demonstrable experience of the design, implementation and operation of secure development processes and practices including knowledge of SCA, SAST, DAST and other common application security tooling

Strong knowledge of application security best practices

Experience of managing application security in CI/CD pipelines

Experience with code and automation (e.g., Terraform, PowerShell, Python, REST APIs)

Desirable to have professional certifications such as CISSP, CISM, CISA.

Experience with regulatory compliance frameworks and security standards (e.g., ISO 27001, NIST, GDPR)

Excellent problem-solving skills and the ability to communicate complex application security concepts to both technical and non-technical stakeholders

Benefits

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits. Joining Bupa in this role you will receive the following benefits and more:

• 25 days holiday, increasing through length of service, with option to buy or sell
• Bupa health insurance as a benefit in kind
• An enhanced pension plan and life insurance
• Onsite gyms or local discounts where no onsite gym available
• Various other benefits and online discounts

Why Bupa?

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do. We encourage all of our people to “Be you at Bupa”, we champion diversity, and we understand the importance of our people representing the communities and customers we serve. That’s why we especially encourage applications from people with diverse backgrounds and experiences.

Bupa takes pride in being a Level 2 Disability Confident Employer and will aim to offer an interview/assessment to disabled applicants who best meet the minimum criteria for the role. We’re committed to ensuring you’re treated fair during the recruitment and offer reasonable adjustments to anyone who may benefit from accommodations to the recruitment process.

If you require information regarding this role in an alternative format, please email: [e-mail]

Time Type: Full time Job Area: IT Locations: Anchorage 4, Salford Quays, Angel Court, London, Staines - Willow House

Be at the heart of helping people live longer healthier happier lives and making a better world. We employ more than 80,000 people globally who are making this a reality. If you've got the belief, the drive and the talent to help us in our ambition then we’d like to hear from you. Wherever you work, one thing stands out about Bupa people. Our customers are our passion – they’re at the heart of our positively different culture of care. At Bupa you’ll be challenged, you’ll be encouraged to innovate, and collaborate with colleagues who are committed to delivering exceptional experiences. We trust, respect and consider everyone, knowing your difference will make the difference.