Security Engineer

AXA UK; Royal Tunbridge Wells; Hybrid; GBP 45,000 - 75,000; Full time

Job summary

An established industry player is seeking a Security Engineer to enhance its digital platform's security and compliance. This role involves analyzing code for vulnerabilities, collaborating with engineers to mitigate risks, and implementing modern security standards. You'll have the opportunity to work in a flexible environment, balancing remote work with in-office responsibilities. With a focus on cloud-native development and security best practices, this position offers a chance to make a significant impact in a forward-thinking organization committed to empowering its employees and customers alike.

Benefits

Competitive salary

Annual performance-based bonus

Contributory pension scheme

Life Assurance

28 days annual leave plus Bank Holidays

Option to buy or sell up to 5 days leave

Employee discounts

Gym benefits

Qualifications

• Experience in complex Salesforce environments and cloud infrastructure.
• Strong knowledge of security standards and networking protocols.

Responsibilities

• Analyze new feature code for security risks and collaborate with engineers.
• Design and optimize logging technology for performance monitoring.

Skills

Cloud Native software development

OWASP CI/CD

Networking protocols (TCP/IP, UDP)

SAST & SCA systems (Snyk, Checkmarx)

Building automated security test suites

Tools

Salesforce

Azure

OpenZAP

Qualys DAST

Job description

Description

AXA is embarking on its most radical and ambitious change programme in the history of its Healthcare business. Driven by a changing UK health landscape, the growth in the (preventative) Wellbeing sector, and the need for radical simplification, we are uniting several businesses internally to produce a stronger offering than ever before in our mission to empower people to be the best version of themselves.

As a Security Engineer, you’ll provide hands-on technical expertise to guide software development, delivery and continuous improvement focusing on risk and security. You’ll help evolve our new Digital Platform so that it is secure and compliant with both internal and industry regulations. You’ll analyze new feature code to identify security risks and work with engineers to mitigate them, applying modern security standards such as OWASP CI/CD, DSOMM, SAMM, and Cloud Security Posture management systems like Azure Defender and Prisma Cloud.

At AXA, we work smart, empowering our people to balance their time between home and the office in a way that works best for them, their team, and our customers. You’ll work at least 40% of your week away from home, moving to the majority of your working week from September 2025. Away from home means attending office locations, visiting clients, or industry events. We’re also open to flexible working arrangements, which you can discuss with Talent Acquisition.

What you’ll be doing:

• Analyzing new feature code to identify security risks and collaborating with engineers to mitigate them.
• Delivering improvements to our DSOMM score, either by working with teams or taking responsibility for tasks such as writing code, configuration, tooling, and documentation.
• Working with Information Security teams to implement security policies efficiently and flexibly.
• Designing, building, operating, and monitoring technology for large, complex multi-site B2C and B2B applications.
• Contributing to and upholding coding standards and the software delivery lifecycle to ensure secure, high-quality systems.
• Designing, building, operating, and optimizing logging technology to gather comprehensive data on site performance and reliability.

Due to high application volume, we may close this advert earlier than the listed deadline to manage interest effectively. If you’re interested in joining AXA, please apply promptly.

What you’ll bring:

• Engineering expertise in complex Salesforce environments.
• Experience with Cloud Native software development, including cloud infrastructure and API design (Azure preferred).
• Proven experience with modern standards such as OWASP CI/CD, DSOMM, SAMM.
• Strong networking protocol knowledge (TCP/IP, UDP, HTTP/3, AMQP, streaming protocols) and cloud network design (VPNs, subnets, regions/zones), as well as integration technologies (Auth0, APIM).
• Expertise with SAST & SCA systems like Snyk and Checkmarx.
• Experience with DAST systems such as OpenZAP and Qualys DAST, preferably with HTTP APIs.
• Ability to manage large-scale software estates operationally (build, release, monitoring, rollbacks, high availability).
• Hands-on experience in building automated security test suites.

Eligibility to work in the UK is a precondition for employment.

What we offer:

Our rewards package includes:

• Competitive salary based on experience
• Annual performance-based bonus
• Contributory pension scheme (up to 12%)
• Life Assurance (up to 10x salary)
• 28 days annual leave plus Bank Holidays
• Option to buy or sell up to 5 days leave
• Employee discounts and gym benefits

To apply, click ‘apply for this job’, log in or create a profile to submit your CV. We are an Equal Opportunities Employer and support applicants with disabilities through our Accessibility Concierge. Please email [e-mail] for assistance.

#FeelgoodHealth #LI-Hybrid

Who we are:

At AXA Health, we help members be their best selves through health and wellbeing support. We are transforming our business with digital, efficient experiences for our customers. We are a passionate team dedicated to helping individuals, families, and organizations thrive.