Application Security Engineer (London or Bristol)

Full Stack Developer focuses on 3+ years in application security, devsecops, and secure software development.

Skills and requirements

• 3+ years in application security, DevSecOps, and secure software development.
• Understanding of common vulnerabilities (OWASP Top 10) and remediation.
• Experience in regulated environments (healthcare, financial services).

Confirmed role details

• Provide remediation guidance for application vulnerabilities.
• Manage dependency vulnerabilities and upgrade cycles.
• Report on application security posture to senior leadership.
• Support DCB0129 clinical safety compliance for software changes.

Additional role context

• Maintain security testing in GitLab CI pipelines.
• Build automated security gates that balance rigour with delivery velocity.
• Enable self-serve security tooling for development teams.