Hybrid Application Security Engineer - CI/CD & SCA Expert

Bupa; Staines-upon-Thames; Hybrid; GBP 67,000 - 84,000; Full time

Benefits offered by this job

25 days holiday

Bupa health insurance

Enhanced pension plan

Onsite gyms or discounts

Online discounts

Job summary

Bupa is seeking an Application Security Engineer to provide technical support for secure development tooling across Bupa Global, India and UK Market Units. You will oversee implementation and operation of security tooling to keep products secure throughout their lifecycle.

You will embed security into development pipelines, drive continuous improvements in controls, and align platforms with GDPR, ISO 27001 and NIST standards, while supporting internal and external assurance activities.

Qualifications

• Experience designing, implementing and operating secure development processes.
• Knowledge of SCA, SAST, DAST and other app security tooling.
• Experience integrating security tooling into CI/CD pipelines.
• Demonstrated ability to communicate complex security concepts to technical and non-technical stakeholders.

Responsibilities

• Design, configure, develop, integrate, deploy and maintain secure development technologies.
• Integrate security tooling with development pipelines and enterprise architecture.
• Embed app security into delivery pipelines and manage DevOps controls.
• Ensure compliance with GDPR, ISO 27001, and NIST standards; provide evidence/reports.
• Monitor tooling, investigate high-risk issues, and drive automation improvements.

Skills

SCA

SAST

DAST

App security

CI/CD

Automation

Terraform

PowerShell

Python

REST APIs

CISSP/CISM/CISA

Tools

MS Entra

Job description

Bupa is seeking an Application Security Engineer to provide technical support for secure development tooling across Bupa Global, India and UK Market Units. You will oversee implementation and operation of security tooling to keep products secure throughout their lifecycle.

You will embed security into development pipelines, drive continuous improvements in controls, and align platforms with GDPR, ISO 27001 and NIST standards, while supporting internal and external assurance activities.