Lead App Sec Engineer — Secure-by-Design & Automation

Bupa; Staines-upon-Thames; Hybrid; GBP 95,000 - 130,000; Full time

Benefits offered by this job

25 days holiday

Enhanced pension and life insurance

Private medical insurance

Health and wellbeing services

Discounts on Bupa products

Job summary

Bupa is seeking a Lead Application Security Engineer in the UK to shape secure-by-design practices across development teams. You will lead tooling, drive automation, and mentor engineers while aligning with ISO 27001/NIST/GDPR standards.

The role combines strategy and hands-on security leadership within a hybrid work model, spanning multiple locations including London, Staines and Salford Quays.

Qualifications

• Significant experience designing, implementing and managing application security programmes.
• Strong knowledge of application security practices and vulnerability management.
• Experience with SCA, SAST, DAST and CI/CD integrations.

Responsibilities

• Lead the design, implementation and ongoing improvement of application security tooling and capabilities.
• Provide technical leadership for secure development technologies including SCA, SAST, DAST, container security, code signing and secret detection.
• Integrate security tooling into CI/CD pipelines and development workflows.
• Help development teams embed secure-by-design principles throughout the software development lifecycle.
• Act as the technical lead for application security and support engineers across the organisation.
• Build and mentor a high-performing team of application security engineers.

Skills

Application security

Secure coding

SCA

SAST

DAST

CI/CD

DevSecOps

Automation

Scripting

Terraform

PowerShell

Python

REST APIs

Leadership

Communication

Education

Degree in Cyber Security or related field

Tools

Terraform

PowerShell

Python

REST APIs

Job description

Bupa is seeking a Lead Application Security Engineer in the UK to shape secure-by-design practices across development teams. You will lead tooling, drive automation, and mentor engineers while aligning with ISO 27001/NIST/GDPR standards.

The role combines strategy and hands-on security leadership within a hybrid work model, spanning multiple locations including London, Staines and Salford Quays.