> Markdown version of [/jobs/ext/3564558-application-security-engineer](https://www.wearedevelopers.com/jobs/ext/3564558-application-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Application Security Engineer - **Company:** Bupa - **Location:** London, UK (Remote available) - **Salary:** £67,300.0 - £84,100.0 - **Contract:** Permanent contract - **Skills:** DevOps, Python (Programming Language), Windows PowerShell, Secure Coding, Delivery Pipeline, Software Security, Restful APIs, Terraform, Static Application Security Testing, Dynamic Application Security Testing - **Published:** October 3, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5909682168 ## About the Role * Demonstrable experience of the design, implementation and operation of secure development processes and practices including knowledge of SCA, SAST, DAST and other common application security tooling * Strong knowledge of application security best practices * Experience of managing application security in CI/CD pipelines * Experience with code and automation (e.g., Terraform, PowerShell, Python, REST APIs) * Desirable to have professional certifications such as CISSP, CISM, CISA. * Experience with regulatory compliance frameworks and security standards (e.g., ISO 27001, NIST, GDPR) * Excellent problem-solving skills and the ability to communicate complex application security concepts to both technical and non-technical stakeholders ## Description We consider all types of flexibility, including locations, hours and working patterns. We make health happen At Bupa, we're passionate about technology. With colleagues, customers, patients and residents in mind you'll have the opportunity to work on innovative projects and make a real impact on their lives. Right from the start you'll become part of our digital strategy, joining us on our journey and developing yourself along the way. As Application Security Engineer you will provide technical support for the design, development, testing, integration and maintenance of Application Security tooling across the Bupa Global, India and UK Market Units. You will act as subject matter expert using your technical skill and expertise to support and oversee the implementation and operation of Application Security technology to ensure that Bupa developed products are secure throughout their lifecycle. How you'll help us make health happen: * Design, configure, develop, integrate, deploy and maintain secure development technologies * Integrate Application Security tooling with our development pipelines, products and enterprise architecture (MS Entra etc) * Develop and embed application security into the development delivery pipelines * Implement a product management approach to drive continuous improvement in controls, including infrastructure as code, CI\CD and DevOps * Ensure that Application Security platforms are aligned to evolving regulatory and security requirements, including GDPR, ISO 27001, and NIST standards * Support compliance and assurance activity by 1LOD, 2LOD, 3LOD and external by maintaining and providing necessary evidence and reports * Monitor Application Security tooling to ensure security and availability. * Investigate Application Security issues which pose a high risk and escalate appropriately * Identify and deliver automation and optimisation in delivery of Application Security tooling * Act as Application Security subject matter expert to advise technical and non-technical team colleagues on best practice application security practices ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Shifting Stress to Progress— Understanding DevOps to do DevOps Better](https://www.wearedevelopers.com/videos/268-shifting-stress-to-progress-understanding-devops-to-do-devops-better) - [Infrastructure as Code: The Developer's Secret Weapon](https://www.wearedevelopers.com/videos/1221-infrastructure-as-code-the-developer-s-secret-weapon) - [Rest API Antipatterns](https://www.wearedevelopers.com/videos/100208-rest-api-antipatterns) - [Building Security Champions](https://www.wearedevelopers.com/videos/360-building-security-champions) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)