FREE ACCESS
5,000–10,000 jobs/day
See all jobs on JobTailor
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Application Security Engineer
HealthHeroApplication Security Engineer at HealthHero managing security across the software development lifecycle. Working with teams in the UK and France to embed automated security practices in development.
About the role
Key responsibilities & impact- Own security across the software development lifecycle, embedding automated security testing into CI/CD pipelines
- Implement and maintain security testing in GitLab CI pipelines
- Configure and tune SAST, DAST, dependency scanning, and secrets detection
- Build automated security gates that balance rigour with delivery velocity
- Enable self-serve security tooling for development teams
- Conduct security-focused code reviews and threat modelling for new features
- Provide remediation guidance for application vulnerabilities
- Train and support developers on secure coding practices
- Triage, patch and track application vulnerabilities through to remediation
- Manage dependency vulnerabilities and upgrade cycles
- Report on application security posture to senior leadership
- Embed GDPR and healthcare regulatory requirements into development processes
- Support DCB0129 clinical safety compliance for software changes
- Support customer security due diligence and audits
- Support ISO27001:2022 ISMS controls and audit process
Requirements
What you’ll need- 3+ years in application security, DevSecOps, and secure software development
- Hands-on experience with CI/CD security integration (GitLab CI or similar)
- Familiarity with SAST/DAST tooling and dependency scanning
- Understanding of common vulnerabilities (OWASP Top 10) and remediation
- Previous experience working as a back end or full stack developer
- Knowledge of GDPR and data protection legislation
- Strong communicator; able to translate security requirements for developers.
Benefits
Comp & perks- A full induction training programme, which will be undertaken via Microsoft Teams.
- An opportunity to work as part of an experienced team who are passionate in their field, supportive, diverse and dynamic.
- 25 days leave.
- Bank Holidays and your birthday off as leave.
- Regular 1-2-1s with your line Manager.
- 24/7 on-call staff support.
- Auto-enrolment pension scheme.
- Health Scheme and access to our Employee Assistance Programme.
- Life Insurance Scheme.
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
application securityDevSecOpssecure software developmentCI/CD security integrationSASTDASTdependency scanningsecure coding practicesvulnerability remediationthreat modelling
Soft Skills
strong communicatortraining and supportcollaborationguidance provision
Certifications
ISO27001:2022 ISMS