Application Security Engineer

Hargreaves Lansdown; West of England; Hybrid; GBP 62,000 - 90,000; Full time

Benefits offered by this job

Hybrid working (2 days in Bristol)

Discretionary annual bonus

Pension contributions up to 11%

Private medical insurance

Life insurance

Travel schemes

Volunteering days

Job summary

Hargreaves Lansdown, the UK's leading investment platform, is hiring a security-focused engineer to integrate security into CI/CD and development workflows. You'll automate security checks, connect tooling to pipelines, and scale secure delivery practices across engineering teams.

This permanent role offers hybrid working with two days in Bristol and a comprehensive benefits package, including a discretionary bonus and pension contributions, to support continuous security improvement.

Qualifications

• Strong experience integrating security tooling into CI/CD pipelines and engineering platforms.
• Develop automation and API-based integrations using Python or JavaScript.
• Broad knowledge of software development languages, frameworks and build/deploy tools (GitHub, GitLab CI/CD, Harness, Jenkins).
• Experience with SAST, DAST, SCA and vulnerability aggregation/ASPM platforms.
• Hands-on with AWS and Azure, deploying containerised workloads with Docker, Lambda, ECS.

Responsibilities

• Design, build, and maintain automated security checks and guardrails embedded into developer workflows.
• Develop automation and API-based integrations to connect security tooling with CI/CD and SCM platforms.
• Operationalise security tooling across engineering platforms with low-friction adoption.
• Embed secure development practices and security testing into delivery pipelines and standards.
• Maintain, optimise, and measure effectiveness of security tools with dashboards and metrics.
• Evaluate new security tools for integration, scalability, and developer experience.
• Support the Application Security Lead in strategy and tooling choices.
• Partner with Engineering teams and CISO to streamline security processes.
• Support Security Champions program through developer enablement and training.
• Prioritise work, meet deadlines, and provide clear progress updates.

Skills

CI/CD security integration

Automation scripting (Python, JavaS

Security tooling in pipelines

Cloud platforms (AWS, Azure)

Container tech (Docker, Lambda, ECS)

Vulnerability management (SAST, DAST,S

CVSS/EPSS awareness

Agile / delivery discipline

Communication & stakeholder alignment

Developer security enablement

Tools

GitHub

GitLab CI/CD

Harness

Jenkins

Job description

Salary: £62,000 - 90,000 per year

Requirements:

• Strong experience integrating security tooling into CI/CD pipelines and engineering platforms.
• Ability to develop automation and API-based integrations using at least one programming or scripting language, such as Python or JavaScript.
• Broad knowledge of software development languages, frameworks, and source code build/deploy tools such as GitHub, GitLab CI/CD, Harness, and Jenkins.
• Experience with common application security tooling, including SAST, DAST, and SCA, plus vulnerability aggregation or ASPM platforms.
• Hands-on experience with cloud platforms such as AWS and Azure, including deploying containerised workloads like Docker or lightweight services like Lambda and ECS.
• Practical understanding of vulnerability scoring frameworks such as CVSS and EPSS.
• Strong understanding of common security vulnerabilities and the ability to keep pace with emerging threats.
• Ability to communicate security risk and support engineering teams in understanding and remediating vulnerabilities.
• Experience working in Agile environments, with strong organisational skills and attention to detail.
• Experience improving workflows and processes based on feedback.
• Awareness of, or experience with, developer-focused Security Champion programs.

Responsibilities:

• Design, build, and maintain automated security checks and guardrails, including policy as code where appropriate, embedded into developer workflows.
• Develop automation and API-based integrations to connect security tooling with CI/CD and Source Code Management platforms, and internal systems.
• Implement and operationalise selected security tooling across engineering platforms, ensuring low-friction adoption across teams.
• Embed secure development practices and security testing into delivery pipelines, shared templates, and engineering standards, supporting Shift Left and Secure by Design principles.
• Maintain, optimise, and measure the effectiveness of security tools, producing dashboards and providing metrics to demonstrate impact.
• Evaluate new security tools, assessing integration, scalability, and developer experience.
• Support the Application Security Lead in defining the strategy, tools, and technologies.
• Build strong partnerships with Engineering teams and the CISO function to streamline and improve security processes.
• Support the Security Champions program through developer enablement and training.
• Prioritise work effectively, meet agreed deadlines, and provide clear progress updates.

Technologies:

• API
• AWS
• Lambda
• Azure
• CI/CD
• Cloud
• Docker
• Embedded
• GitHub
• GitLab
• Support
• JavaScript
• Jenkins
• Python
• Security

More:

We are HL, the UKs number 1 investment platform for private investors, based in Bristol. For more than 40 years, we have helped investors save time, tax, and money on their investments. We offer a workplace with constant learning, dynamic teams, and a strong ethos built around service, quality, innovation, and opportunity. This is a permanent, full-time role working 37.5 hours per week, Monday to Friday, with two days a week in the office in Bristol, BS1 5HL. We offer a range of benefits including a discretionary annual bonus, annual pay review, 25 days holiday plus bank holidays and an additional Christmas closure day, the option to purchase extra holiday, flexible working options including hybrid working, enhanced parental leave, pension contributions up to 11% employer contribution, income protection, life insurance, private medical insurance, health care cash plans, health screening, confidential support services, fitness and wellness access, travel schemes, bike storage and shower facilities, subsidised food and coffee, and two paid volunteering days per year. We are an inclusive employer that values diversity and may also offer this role on a flexible working or part-time basis. The interview process has two stages and includes an introductory conversation, technical competency-based questions, and a task.

last updated 36 week of 2026