Bupa Logo

Bupa

Application Security Engineer

Posted 8 Hours Ago
Be an Early Applicant
In-Office
2 Locations
Entry level
In-Office
2 Locations
Entry level
Designs, deploys, integrates, and maintains application security tooling across Bupa’s development environments. The role embeds security into CI/CD pipelines, supports infrastructure as code and DevOps practices, monitors tooling, investigates high-risk issues, automates controls, and provides application security expertise. It also supports regulatory compliance, assurance activities, evidence gathering, and communication with technical and non-technical stakeholders.
The summary above was generated by AI

Job Description:

Application Security Engineer

Manchester, Staines or London

Permanent

Hybrid up to 3 days WFH

Salary from: £67.3k - £84.1k + 10% bonus + fantastic benefits

37.5 hours per week

 

We consider all types of flexibility, including locations, hours and working patterns.


We make health happen


At Bupa, we’re passionate about technology. With colleagues, customers, patients and residents in mind you’ll have the opportunity to work on innovative projects and make a real impact on their lives.


Right from the start you’ll become part of our digital strategy, joining us on our journey and developing yourself along the way.


As Application Security Engineer you will provide technical support for the design, development, testing, integration and maintenance of Application Security tooling across the Bupa Global, India and UK Market Units. You will act as subject matter expert using your technical skill and expertise to support and oversee the implementation and operation of Application Security technology to ensure that Bupa developed products are secure throughout their lifecycle.


How you’ll help us make health happen:


  • Design, configure, develop, integrate, deploy and maintain secure development technologies
  • Integrate Application Security tooling with our development pipelines, products and enterprise architecture (MS Entra etc)
  • Develop and embed application security into the development delivery pipelines
  • Implement a product management approach to drive continuous improvement in controls, including infrastructure as code, CI\CD and DevOps
  • Ensure that Application Security platforms are aligned to evolving regulatory and security requirements, including GDPR, ISO 27001, and NIST standards
  • Support compliance and assurance activity by 1LOD, 2LOD, 3LOD and external by maintaining and providing necessary evidence and reports
  • Monitor Application Security tooling to ensure security and availability.
  • Investigate Application Security issues which pose a high risk and escalate appropriately
  • Identify and deliver automation and optimisation in delivery of Application Security tooling
  • Act as Application Security subject matter expert to advise technical and non-technical team colleagues on best practice application security practices

You


  • Demonstrable experience of the design, implementation and operation of secure development processes and practices including knowledge of SCA, SAST, DAST and other common application security tooling
  • Strong knowledge of application security best practices
  • Experience of managing application security in CI/CD pipelines
  • Experience with code and automation (e.g.,  Terraform, PowerShell, Python, REST APIs)
  • Desirable to have professional certifications such as CISSP, CISM, CISA.
  • Experience with regulatory compliance frameworks and security standards (e.g., ISO 27001, NIST, GDPR)
  • Excellent problem-solving skills and the ability to communicate complex application security concepts to both technical and non-technical stakeholders

Benefits

 

Our benefits are designed to make health happen for our people. Viva is our global wellbeing programme and includes all aspects of our health – from mental and physical, to financial, social and environmental wellbeing. We support flexible working and have a range of family friendly benefits.

 

Joining Bupa in this role you will receive the following benefits and more:


• 25 days holiday, increasing through length of service, with option to buy or sell

• Bupa health insurance as a benefit in kind

• An enhanced pension plan and life insurance

• Onsite gyms or local discounts where no onsite gym available

• Various other benefits and online discounts


Why Bupa?

 

We’re a health insurer and provider. With no shareholders, our customers are our focus. Our people are all driven by the same purpose – helping people live longer, healthier, happier lives and making a better world. We make health happen by being brave, caring and responsible in everything we do.

 

We encourage all of our people to “Be you at Bupa”, we champion diversity, and we understand the importance of our people representing the communities and customers we serve.  That’s why we especially encourage applications from people with diverse backgrounds and experiences. 


Bupa takes pride in being a Level 2 Disability Confident Employer and will aim to offer an interview/assessment to disabled applicants who best meet the minimum criteria for the role. We’re committed to ensuring you’re treated fairly during the recruitment process and offer reasonable adjustments to anyone who may benefit from accommodations to the recruitment process.   

 

If you require information regarding this role in an alternative format, please email: [email protected] 



Time Type:

Full time

Job Area:

IT

Locations:

Anchorage 4, Salford Quays, Angel Court, London, Staines - Willow House
HQ

Bupa London, England Office

1 Angel Court, London, United Kingdom, EC2R 7HJ

Bupa Chelmsford, England Office

Chelmsford, United Kingdom

Bupa Croydon, England Office

Croydon, United Kingdom

Bupa Guildford, England Office

Guildford, United Kingdom

Bupa Harlow, England Office

Harlow, United Kingdom

Bupa Sidcup, England Office

Sidcup, United Kingdom

Bupa Staines, England Office

Staines, United Kingdom, TW18 3HZ

Bupa Waverley, England Office

Waverley, United Kingdom

Similar Jobs

28 Days Ago
Easy Apply
Remote or Hybrid
United Kingdom
Easy Apply
Expert/Leader
Expert/Leader
Artificial Intelligence • Cloud • Computer Vision • Hardware • Internet of Things • Software
Lead Samsara’s vulnerability management and application security programs across cloud, firmware, IoT, and corporate systems. Define technical strategy, automate vulnerability detection and response, reduce remediation time, guide engineering teams, mentor security engineers, investigate critical vulnerabilities, and support incident response. The role requires strong AWS, programming, vulnerability management, application security testing, AI/LLM, and security automation expertise.
Top Skills: Ai/LlmAWSAws LambdaCC++Ci/CdCvssDastEpssFedrampFirmwareGoIotJavaScriptPythonSastScaSemgrepTinesWiz
6 Hours Ago
In-Office
London, Greater London, England, GBR
Entry level
Entry level
Marketing Tech • Software
Supports application security tooling, vulnerability management, cloud security monitoring, secure design and API reviews, threat modeling, penetration-test triage, and engineering engagement. The role involves using tools such as Aikido and Prisma Cloud, reviewing code and CI/CD pipelines, maintaining security processes, and independently prioritizing security requests and remediation activities.
Top Skills: AikidoCheckmarxCi/CdDastGCPGitlab CiPrisma CloudPythonSastScaSecrets ScanningSemgrepSnyk
9 Days Ago
Remote or Hybrid
London, Greater London, England, GBR
Senior level
Senior level
Cloud • Information Technology • Security • Software • Cybersecurity
Design, develop, review, deploy, and maintain security-focused distributed systems operating at internet scale. Participate in on-call rotations, monitor emerging web application security risks, contribute to product roadmaps, collaborate cross-functionally, and mentor other engineers through technical guidance and knowledge sharing.
Top Skills: Api ShieldDistributed SystemsGoKafkaKubernetesLinuxPage ShieldRustSaltSystemdUnixWafWeb Asset Management

What you need to know about the London Tech Scene

London isn't just a hub for established businesses; it's also a nursery for innovation. Boasting one of the most recognized fintech ecosystems in Europe, attracting billions in investments each year, London's success has made it a go-to destination for startups looking to make their mark. Top U.K. companies like Hoptin, Moneybox and Marshmallow have already made the city their base — yet fintech is just the beginning. From healthtech to renewable energy to cybersecurity and beyond, the city's startups are breaking new ground across a range of industries.

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account