Application Security Engineer — DevSecOps & CI/CD Guardrails

Hargreaves Lansdown; West of England; Hybrid; GBP 62,000 - 90,000; Full time

Benefits offered by this job

Hybrid working (2 days in Bristol)

Discretionary annual bonus

Pension contributions up to 11%

Private medical insurance

Life insurance

Travel schemes

Volunteering days

Job summary

Hargreaves Lansdown, the UK's leading investment platform, is hiring a security-focused engineer to integrate security into CI/CD and development workflows. You'll automate security checks, connect tooling to pipelines, and scale secure delivery practices across engineering teams.

This permanent role offers hybrid working with two days in Bristol and a comprehensive benefits package, including a discretionary bonus and pension contributions, to support continuous security improvement.

Qualifications

• Strong experience integrating security tooling into CI/CD pipelines and engineering platforms.
• Develop automation and API-based integrations using Python or JavaScript.
• Broad knowledge of software development languages, frameworks and build/deploy tools (GitHub, GitLab CI/CD, Harness, Jenkins).
• Experience with SAST, DAST, SCA and vulnerability aggregation/ASPM platforms.
• Hands-on with AWS and Azure, deploying containerised workloads with Docker, Lambda, ECS.

Responsibilities

• Design, build, and maintain automated security checks and guardrails embedded into developer workflows.
• Develop automation and API-based integrations to connect security tooling with CI/CD and SCM platforms.
• Operationalise security tooling across engineering platforms with low-friction adoption.
• Embed secure development practices and security testing into delivery pipelines and standards.
• Maintain, optimise, and measure effectiveness of security tools with dashboards and metrics.
• Evaluate new security tools for integration, scalability, and developer experience.
• Support the Application Security Lead in strategy and tooling choices.
• Partner with Engineering teams and CISO to streamline security processes.
• Support Security Champions program through developer enablement and training.
• Prioritise work, meet deadlines, and provide clear progress updates.

Skills

CI/CD security integration

Automation scripting (Python, JavaS

Security tooling in pipelines

Cloud platforms (AWS, Azure)

Container tech (Docker, Lambda, ECS)

Vulnerability management (SAST, DAST,S

CVSS/EPSS awareness

Agile / delivery discipline

Communication & stakeholder alignment

Developer security enablement

Tools

GitHub

GitLab CI/CD

Harness

Jenkins

Job description

Hargreaves Lansdown, the UK's leading investment platform, is hiring a security-focused engineer to integrate security into CI/CD and development workflows. You'll automate security checks, connect tooling to pipelines, and scale secure delivery practices across engineering teams.

This permanent role offers hybrid working with two days in Bristol and a comprehensive benefits package, including a discretionary bonus and pension contributions, to support continuous security improvement.