Application Security Engineer, Hargreaves Lansdown
Offers discretionary annual bonus
More information about location
The UK's number one investment and savings platform for private investors
Posted today
The UK's number one investment and savings platform for private investors
1001+ employees
Posted today
Offers discretionary annual bonus
More information about location
1001+ employees
Company mission
To make it easy for people to save and invest for a better future.
Role
Who you are
- Experience improving workflows and processes based on feedback
- Strong experience integrating security tooling into CI/CD pipelines and engineering platforms
- Ability to develop automation and API-based integrations using at least one programming or scripting language (e.g. Python, JavaScript)
- Broad knowledge of software development languages, frameworks, source code build/deploy tools (e.g. Github, Gitlab CI/CD, Harness, Jenkins)
- Experience with common application security tooling (SAST, DAST, SCA) and vulnerability aggregation or ASPM Platforms to consolidate and prioritise findings across multiple sources
- Hands-on experience of cloud platforms (AWS, Azure), including deploying containerised workloads (e.g. Docker) or lightweight services (e.g., Lambda, ECS) to support security automation and integrations
- Practical understanding of vulnerability scoring frameworks such as CVSS and EPSS
- Strong understanding of common security vulnerabilities, with the ability to keep pace with emerging threats
- Ability to communicate security risk and support engineering teams in understanding and remediating vulnerabilities
- Experience working in Agile environments, with strong organisational skills and attention to detail
- Awareness of and/or experience with developer-focused Security Champion programs
What the job involves
- As an Application Security Engineer at HL, you will play a key role in strengthening the security of our products and services. Partnering with Engineering and other security functions, you'll embed and enhance security across the SDLC. You will help shape our security tooling strategy, drive automation to scale assurance across the business, and create reusable components and support integrations that help reduce friction for engineering teams
- This role is an opportunity to enable HL to build secure products at pace by embedding scalable, automated security controls into our SDLC whilst supporting a culture of Secure by Design
- Design, build and maintain automated security checks and guardrails (including policy as code where appropriate) embedded into developer workflows
- Develop automation and API-based integrations to connect security tooling with CI/CD and Source Code Management platforms, and internal systems
- Implement and operationalise selected security tooling across engineering platforms, ensuring low friction adoption across teams
- Embed secure development practices and security testing into delivery pipelines, shared templates and engineering standards, supporting Shift Left and Secure by Design principles
- Maintain, optimise and measure the effectiveness of security tools, producing dashboards and providing metrics to demonstrate impact
- Evaluate new security tools, assessing integration, scalability and developer experience
- Support the Application Security Lead in defining the strategy, tools and technologies
- Build strong partnerships with Engineering teams and the CISO function to streamline and improve security processes
- Supporting the Security Champions program at HL through developer enablement and training
- Prioritise work effectively, meet agreed deadlines and provide clear progress updates
- This role is permanent, full time, 37.5 hours per week, Monday to Friday. We have returned to the office, however for this role we offer a flexible working pattern to enable you the option of working from home and coming into the office around once a month
Application process
- End Date: March 30, 2026
- The interview process will be two stages including an introductory conversation, and a technical competency-based questions and a task
Our take
Hargreaves Lansdown is the UK's number one investment platform for private investors, trusted by 2M people to help manage their money. Founded back in 1981 in a spare bedroom, it's grown into a powerhouse, and with more than £170B in assets under its administration, it's become the biggest name in DIY investing in the country.
The company offers a wide range of services that include Stocks and Shares ISAs, pensions (SIPPs), savings accounts, and a market-leading investment app, making it easy for everyday people to invest, save, and better plan for their retirement.
Recently, HL was taken private in a £5.4B deal, with new leadership aiming to modernise and future-proof the business. And despite more competition from digital challengers, it continues to thrive, adding more customers, launching new features, and paying strong dividends. On top of that, it's got over 40 years of experience and a forward-thinking team driving it towards even more success.
Freddie
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Generous Discretionary Annual Bonus
- Up to 19% Pension
- Private Medical Insurance*
- Health Cash Plan
- Income Protection
- Life Assurance (4x Salary)
- Additional Holiday Purchase
Company HQ
Canon's Marsh, Bristol, UK
Leadership
Richard Flint
(CEO)Previously, Richard spent over 5 years at Sky Betting & Gaming as CEO and an Executive Chair. Prior to that, he spent over 13 years at Sky as a Managing Director. Now, he is an Investor and Chairperson at a number of companies.
Mohamed Ait Si Brahim
(Group CTO)Mohamad is also a Member of the Harvard Business Review Advisory Council. Previously, he spent over 7 years at Profile Pensions as CTO. Prior to that, he was a VP of Engineering at OpenGamma and Head of Market Risk Technology at LSEG.
Share this job
View 16 more jobs at Hargreaves Lansdown