Senior Application Security Engineer - HandBandME

About the Role:

About Holland & Barrett Holland & Barrett is on a mission to make health and wellness a way of life for everyone. As part of our digital transformation, we are looking for a Senior Application Security Engineer to join our H&B&Me team, playing a key role in embedding security within our technology landscape. If you're passionate about application security and want to drive innovation within a forward-thinking environment, we want to hear from you!

The Role

As a Senior Application Security Engineer, you will help define and execute Holland & Barrett's application security strategy. You will work closely with development, product, and security teams to implement best practices, promote security-by-design principles, and ensure our software development lifecycle (SDLC) remains secure and efficient.

Key Responsibilities:

• Define and implement the H&B application security strategy, ensuring security is embedded from the earliest stages of product development.
• Establish a secure software development lifecycle (SDLC) to enable development teams to deliver faster while maintaining software integrity, authenticity, and third-party library security.
• Conduct risk assessments, threat modelling, attack trees, and code and architecture reviews in collaboration with development teams, using findings to drive security improvements.
• Develop and maintain security standards and guidelines, including reusable infrastructure and application code artefacts for development teams.
• Provide expert guidance and support to development teams on secure coding practices and mitigating security risks.

Essential Requirements:

• 5+ years of experience in application security, with at least 3+ years in software development.
• Deep understanding of secure coding practices, threat modelling, vulnerability management, encryption, authentication, and access control.
• Hands-on experience with AWS, Kubernetes, Service Mesh, and API Security (authentication and authorisation).
• Strong knowledge of security in CI/CD pipelines.
• Proficiency in programming languages such as Python, Java, JavaScript, GoLang, or Rust.
• Experience working in Agile environments (SCRUM) and managing multiple security projects.

Desired Requirements:

• Ability to work independently, take initiative, and uphold high security standards.
• Strong communication and collaboration skills, with the ability to engage technical and non-technical teams effectively.

If you're an experienced Application Security Engineer looking for your next challenge, apply today and help shape the future of security at Holland & Barrett!

What we offer:

• Pension company contribution = 3%
• Incentive scheme up to 10% of annual salary, based on company performance.
• Your wellbeing is paramount so you can get away and take 33 Days Holiday per year.
• Private Medical Care (Self after 1 year)
• Learning and Development opportunity with Holland & Barrett is a great base for career development long term.
• Career progression.
• Refer and Earn Scheme - as we're growing you can earn money by referring people to join us from your network.
• Epic Extras gives you access to exclusive benefits, free advice and savings from a range of retailers and providers.
• Stay healthy with Discounted Products - from day one you'll get a 25% discount (on top of other promotions) when you shop at H&B on anything that you buy.
• We all need a little help sometimes, so we offer Free 24/7 Confidential Advice & Colleague Welfare.
• Mental Health First Aiders - we have lots of qualified Mental Health First Aiders because its all about your health & wellbeing.
• Stay active in the Onsite Gym at our Nuneaton Hub!
• We have colleague Reward and Recognition Schemes, so your hard work and loyalty won't go unnoticed.
• And many more!

We're passionate about helping every colleague thrive across all dimensions of wellbeing, and we're committed to having a diverse and inclusive workplace. In line with our EPIC values (Expertise, Pioneering, Inclusive, Caring), we embrace and actively celebrate all our colleagues' unique and varying experiences, backgrounds, identities and cultures - I am me, we are H&B.