HealthHero

Application Engineer

• Own security across the software development lifecycle, embedding automated security testing into CI/CD pipelines
• Implement and maintain security testing in GitLab CI pipelines
• Configure and tune SAST, DAST, dependency scanning, and secrets detection
• Build automated security gates that balance rigour with delivery velocity
• Enable self-serve security tooling for development teams
• Conduct security-focused code reviews and threat modelling for new features
• Provide remediation guidance for application vulnerabilities
• Train and support developers on secure coding practices
• Triage, patch and track application vulnerabilities through to remediation
• Manage dependency vulnerabilities and upgrade cycles
• Report on application security posture to senior leadership
• Embed GDPR and healthcare regulatory requirements into development processes
• Support DCB0129 clinical safety compliance for software changes
• Support customer security due diligence and audits
• Support ISO27001:2022 ISMS controls and audit process

Application Security Engineer

Security Engineer

• Champion integration of security testing into CI/CD pipelines across all development teams and usage of automated security gates: SAST, DAST, dependency scanning, secrets detection
• Enable self-serve security tooling for development teams
• Ability to set up development environment
• Own cloud security posture management using Wiz (or similar CSPM)
• Define and enforce cloud security baselines, guardrails, and policies in AWS
• Implement and maintain IaC security scanning for Terraform
• Manage IAM policies, network segmentation, and secrets management
• Configure and tune SIEM (or similar) for cloud-focused detection
• Establish logging, monitoring, and alerting requirements based on threat modelling
• Investigate and respond to cloud security events
• Identify, articulate, and escalate security risks to senior leadership with mitigation plans
• Track and remediate vulnerabilities across infrastructure
• Manage customer initiatives related to due diligence when required
• Support and develop annual programme of Penetration Testing and associated remediations
• Partner with internal and stakeholder management to support any requirements from the security function - particularly governance and accreditation requirements across different countries
• Provide expertise on emerging threats and vulnerabilities
• Support response to customer/client due diligence requests with timely and accurate information regarding vulnerability exposure

Senior Cloud Security Engineer, London/Bristol

Therapist

• **About the role**
• We are looking for a remote part-time or full time Physiotherapist to join our team.
• You will be delivering virtual and telephonic physiotherapy assessments and treatment for a diverse range of conditions. Your clinical reasoning skills will facilitate a client into three possible treatment pathways: self-management, virtual face-to-face or face to face. You will assess, diagnose and manage musculoskeletal problems, supporting patients with undifferentiated conditions within the scope of the role.