Lead App Security Engineer – Secure-by-Design & DevSecOps

Bupa; City Of London, Greater London; Hybrid; GBP 80,000 - 100,000; Full time

Benefits offered by this job

25 days holiday

Enhanced pension and life insurance

Private medical insurance

Health and wellbeing services

Job summary

Bupa is hiring a Lead Application Security Engineer in the UK. You will shape secure-by-design practices across development teams, guiding tooling like SCA/SAST/DAST, container security and automation to strengthen our cyber posture.

You will lead engineers, collaborate with product and compliance, and drive secure practices across the software lifecycle in a hybrid environment with multiple UK locations.

Qualifications

• Significant experience designing, implementing and managing application security programmes and tooling.
• Strong knowledge of application security practices, secure coding principles and vulnerability management.
• Experience with SCA, SAST, DAST and related application security technologies.
• Experience integrating security into CI/CD pipelines and DevSecOps environments.

Responsibilities

• Lead design, implementation and ongoing improvement of application security tooling and capabilities.
• Provide technical leadership for secure development technologies including SCA, SAST, DAST and container security.
• Integrate security tooling into CI/CD pipelines and development workflows.
• Embed secure-by-design principles throughout the software development lifecycle.
• Act as the technical lead for application security across the organisation.
• Build and develop a high-performing team through coaching and knowledge sharing.
• Drive automation through scripting, APIs and infrastructure-as-code.
• Monitor and support application security platforms and incident response.
• Ensure controls align with ISO 27001, NIST and GDPR.
• Develop metrics and reporting to measure security outcomes.

Skills

Application security

SCA/SAST/DAST

CI/CD security

Automation scripting

Terraform

PowerShell

Python

REST APIs

Leadership

ISO 27001/NIST/GDPR knowledge

Communication

Cyber security degree

Professional certifications

Education

Degree-level qualification in Cyber Security or Information Technology

Tools

Terraform

CI/CD tooling

Job description

Bupa is hiring a Lead Application Security Engineer in the UK. You will shape secure-by-design practices across development teams, guiding tooling like SCA/SAST/DAST, container security and automation to strengthen our cyber posture.

You will lead engineers, collaborate with product and compliance, and drive secure practices across the software lifecycle in a hybrid environment with multiple UK locations.