Security Engineer – Bristol, England, United Kingdom
AXA is embarking on its most radical and ambitious change programme in the history of its Healthcare business. Driven by a changing UK health landscape, the growth in the (preventative) Wellbeing sector, and the need for radical simplification, we are uniting several businesses internally to produce a stronger offering than ever before in our mission to empower people to be the best version of themselves.
Responsibilities
* Analyse new feature code to identify security risks and work with engineers to mitigate them.
* Deliver improvements to our DSOMM score, either working with teams or taking direct responsibility for tasks such as writing code, configuration, tooling and documentation.
* Collaborate with Information Security teams to ensure security policies are implemented efficiently and flexibly.
* Design, build, operate and monitor technology for large, complex multi‑site b2c and b2b applications.
* Work across multiple technology platforms, learning and applying security knowledge to new platforms and technologies.
* Contribute to the definition, adherence to and upholding of coding standards and our software delivery lifecycle to ensure secure, quality systems.
* Design, build, operate and optimise logging technology to gather more data about site performance and reliability.
Qualifications
* Exposure to Cloud Native software development, including cloud infrastructure and API design (Azure preferred).
* Willingness to learn and apply engineering and security expertise to projects built on multiple platforms, such as Salesforce and Azure.
* Proven experience applying modern standards such as OWASP CI/CD, DSOMM, SAMM, etc.
* Strong networking protocol knowledge (TCP/IP, UDP, HTTP/3, AMQP, streaming protocols, etc.), cloud network design (VPNs, subnets, regions/zones, etc.) and integration related technologies (Auth0, APIM).
* Expertise with SAST & SCA systems such as Snyk, Checkmarx.
* Experience with DAST systems such as OpenZAP, Qualys DAST (preferred) ideally with HTTP APIs.
* Ability to manage large‑scale software estates from an operational perspective (build, release, monitoring, rollbacks, high availability, etc.).
* Hands‑on experience building automated security test suites.
Benefits
* Competitive annual salary dependent on experience.
* Annual company & performance‑based bonus.
* Contributory pension scheme (up to 12% employer contributions).
* Life Assurance (up to 10× annual salary).
* Private medical cover.
* 28 days annual leave plus Bank Holidays.
* Opportunity to buy up to 5 extra days leave or sell up to 5 days leave.
* Wellbeing services & resources.
* AXA employee discounts.
Equal Opportunities
We’re proud to be an Equal Opportunities Employer and don’t discriminate against employees or potential employees based on protected characteristics. If you have a long‑term condition or disability and require adjustments during the application or interview process, we’re proud to offer access to the AXA Accessibility Concierge. For our support, please send an email to lauren.standen@axa‑insurance.co.uk.
As a precondition of employment for this role, you must be eligible and authorised to work in the United Kingdom.
Due to the number of applications we expect to receive for this role, we reserve the right to close this advert earlier than the listed closing date to ensure we’re able to effectively manage interest.
#J-18808-Ljbffr