Application Security Engineer

Salary: £62,000 - 90,000 per year

Requirements:

• Strong experience integrating security tooling into CI/CD pipelines and engineering platforms.
• Ability to develop automation and API-based integrations using at least one programming or scripting language, such as Python or JavaScript.
• Broad knowledge of software development languages, frameworks, and source code build/deploy tools such as GitHub, GitLab CI/CD, Harness, and Jenkins.
• Experience with common application security tooling, including SAST, DAST, and SCA, plus vulnerability aggregation or ASPM platforms.
• Hands-on experience with cloud platforms such as AWS and Azure, including deploying containerised workloads like Docker or lightweight services like Lambda and ECS.
• Practical understanding of vulnerability scoring frameworks such as CVSS and EPSS.
• Strong understanding of common security vulnerabilities and the ability to keep pace with emerging threats.
• Ability to communicate security risk and support engineering teams in understanding and remediating vulnerabilities.
• Experience working in Agile environments, with strong organisational skills and attention to detail.
• Experience improving workflows and processes based on feedback.
• Awareness of, or experience with, developer-focused Security Champion programs.

Responsibilities:

• Design, build, and maintain automated security checks and guardrails, including policy as code where appropriate, embedded into developer workflows.
• Develop automation and API-based integrations to connect security tooling with CI/CD and Source Code Management platforms, and internal systems.
• Implement and operationalise selected security tooling across engineering platforms, ensuring low-friction adoption across teams.
• Embed secure development practices and security testing into delivery pipelines, shared templates, and engineering standards, supporting Shift Left and Secure by Design principles.
• Maintain, optimise, and measure the effectiveness of security tools, producing dashboards and providing metrics to demonstrate impact.
• Evaluate new security tools, assessing integration, scalability, and developer experience.
• Support the Application Security Lead in defining the strategy, tools, and technologies.
• Build strong partnerships with Engineering teams and the CISO function to streamline and improve security processes.
• Support the Security Champions program through developer enablement and training.
• Prioritise work effectively, meet agreed deadlines, and provide clear progress updates.

Technologies:

• API
• AWS
• Lambda
• Azure
• CI/CD
• Cloud
• Docker
• Embedded
• GitHub
• GitLab
• Support
• JavaScript
• Jenkins
• Python
• Security

More:

We are HL, the UKs number 1 investment platform for private investors, based in Bristol. For more than 40 years, we have helped investors save time, tax, and money on their investments. We offer a workplace with constant learning, dynamic teams, and a strong ethos built around service, quality, innovation, and opportunity. This is a permanent, full-time role working 37.5 hours per week, Monday to Friday, with two days a week in the office in Bristol, BS1 5HL. We offer a range of benefits including a discretionary annual bonus, annual pay review, 25 days holiday plus bank holidays and an additional Christmas closure day, the option to purchase extra holiday, flexible working options including hybrid working, enhanced parental leave, pension contributions up to 11% employer contribution, income protection, life insurance, private medical insurance, health care cash plans, health screening, confidential support services, fitness and wellness access, travel schemes, bike storage and shower facilities, subsidised food and coffee, and two paid volunteering days per year. We are an inclusive employer that values diversity and may also offer this role on a flexible working or part-time basis. The interview process has two stages and includes an introductory conversation, technical competency-based questions, and a task.

last updated 35 week of 2026