Senior AppSec Architect — DevSecOps Leader

Bupa; Salford; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

25 days holiday

Enhanced pension

Private medical insurance

Private dental insurance

Cycle to work scheme

Gym membership

Health & wellbeing programme

Job summary

Bupa is hiring a Lead Application Security Engineer to shape secure-by-design practices across development environments in the UK and beyond. You will design and grow security tooling, mentor engineers and align with regulatory standards.

You will drive automation, collaborate with engineering, product and security teams, and ensure robust security controls across the software lifecycle.

Qualifications

• Significant experience designing, implementing and managing application security programmes and tooling.
• Strong knowledge of secure coding principles and vulnerability management.
• Experience with SCA, SAST and DAST tools and practices.

Responsibilities

• Lead the design, implementation and ongoing improvement of application security tooling and capabilities.
• Provide technical leadership for secure development technologies and practices.
• Integrate security tooling into CI/CD pipelines and DevSecOps workflows.
• Coach and develop a high-performing team of app security engineers.

Skills

Application security

Leadership

SCA

SAST

DAST

CI/CD

Automation

Terraform

PowerShell

Python

REST APIs

ISO 27001

NIST

GDPR

Education

Bachelor’s degree in Cyber Security / Information Technology

CISSP / CISM / CISA (advantageous)

Tools

Terraform

PowerShell

Python

REST APIs

Job description

Bupa is hiring a Lead Application Security Engineer to shape secure-by-design practices across development environments in the UK and beyond. You will design and grow security tooling, mentor engineers and align with regulatory standards.

You will drive automation, collaborate with engineering, product and security teams, and ensure robust security controls across the software lifecycle.