Lead App Security Engineer – Secure-by-Design

Bupa UK; Staines-upon-Thames; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

25 days holiday

Enhanced pension

Private medical insurance

Health and wellbeing services

Job summary

Bupa UK is seeking a Lead Application Security Engineer to shape security across our global platforms, including UK and India. You will lead the development of security tooling, guide secure development practices and partner with engineering, product and compliance teams to strengthen our cyber posture.

The role blends hands-on security engineering with leadership to deliver secure, scalable and compliant software solutions that support millions of customers and colleagues daily.

Qualifications

• Significant experience designing, implementing and managing application security programmes and tooling.
• Strong knowledge of application security practices, secure coding principles and vulnerability management.
• Experience with SCA, SAST, DAST and related technologies.
• Experience integrating security into CI/CD pipelines and DevSecOps environments.
• Automation and scripting with Terraform, PowerShell, Python, REST APIs.

Responsibilities

• Lead design, implementation and ongoing improvement of application security tooling and capabilities.
• Provide technical leadership for secure development technologies and practices.
• Integrate security tooling into CI/CD pipelines and development workflows.
• Embed secure-by-design principles across the software development lifecycle.
• Lead and coach a high-performing team of application security engineers.

Skills

AppSec design

SCA/SAST/DAST

CI/CD integration

Automation scripting

Leadership

ISO 27001/NIST/GDPR

DevSecOps

Education

Cyber Security degree

CISSP/CISM/CISA

Tools

SCA tooling

SAST/DAST tooling

Job description

Bupa UK is seeking a Lead Application Security Engineer to shape security across our global platforms, including UK and India. You will lead the development of security tooling, guide secure development practices and partner with engineering, product and compliance teams to strengthen our cyber posture.

The role blends hands-on security engineering with leadership to deliver secure, scalable and compliant software solutions that support millions of customers and colleagues daily.