Bupa
Bupa
Bupa is a global healthcare company serving individuals, families, businesses, and care residents through health insurance, subscriptions, private healthcare, dental services, and care homes. Its UK offering includes flexible insurance plans, pay-as-you-go GP appointments, targeted health screenings, and dental treatment through Bupa Dental Care. Bupa also supports mental health and publishes practical health information and resources online. With a large international workforce and a broad healthcare operation, Bupa offers a range of professional opportunities across insurance, clinical services, care, technology, and corporate functions.

Application Security Engineer - Bupa (Hybrid, UK)

Secure Bupa’s health insurance and healthcare technology platforms through application security engineering. Integrate and improve security tooling across development pipelines serving Bupa’s UK, India, and global market units.

Description

  • Support the design, development, testing, integration, and maintenance of application security tooling across Bupa’s global, India, and UK market units.
  • Serve as a subject matter expert for the implementation and operation of application security technologies.
  • Design, configure, develop, integrate, deploy, and maintain technologies that support secure software development.
  • Connect application security tools with development pipelines, products, enterprise architecture, and MS Entra.
  • Build application security practices into software delivery pipelines.
  • Use a product management approach to continually improve controls across infrastructure as code, CI/CD, and DevOps.
  • Keep application security platforms aligned with changing regulatory and security requirements.
  • Support compliance and assurance work by maintaining and supplying evidence and reports.
  • Monitor application security tooling for security and availability.
  • Investigate high-risk application security issues and escalate them through the appropriate channels.
  • Find and implement automation and efficiency improvements for application security tooling.
  • Guide technical and non-technical colleagues on application security best practices.

Requirements

  • Proven experience designing, implementing, and operating secure software development processes and practices.
  • Working knowledge of SCA, SAST, DAST, and other common application security tools.
  • Strong understanding of application security best practices.
  • Experience managing application security within CI/CD pipelines.
  • Hands-on coding and automation experience with tools such as Terraform, PowerShell, Python, and REST APIs.
  • Experience working with regulatory compliance frameworks and security standards including ISO 27001, NIST, and GDPR.
  • Professional certifications such as CISSP, CISM, or CISA are desirable.
  • Strong problem-solving ability.
  • Clear communication skills for explaining complex application security concepts to technical and non-technical stakeholders.

Benefits

  • 10% bonus.
  • 25 days of holiday, increasing with length of service, with the option to buy or sell days.
  • Bupa health insurance provided as a benefit in kind.
  • Enhanced pension plan and life insurance.
  • Access to onsite gyms or local discounts where an onsite gym is unavailable.
  • Additional benefits and online discounts.
  • Flexible working arrangements.
  • Family-friendly benefits.
  • Viva global wellbeing programme covering mental, physical, financial, social, and environmental wellbeing.

Related Jobs

IQVIA

Clinical Research Associate, Sponsor Dedicated

IQVIA

Monitor clinical trial sites and support protocol compliance, patient recruitment, and study documentation for IQVIA. Coordinate with site staff and project teams to help trials meet quality standards and milestones.

Open
CTI Clinical Trial and Consulting Services

Senior Clinical Research Associate

CTI Clinical Trial and Consulting Services
1,001 – 5,000 Employees
BiotechnologyConsultingHealthcare

Monitor clinical trial sites for CTI, a global clinical research CRO, and oversee site visits, regulatory records, investigational products, and study deliverables. Coordinate site management and study activities with investigators, sponsors, clients, and internal teams.

Open