Application Security Engineer (London or Bristol)We are HealthHero, Europe''s largest digital clinic. Join us at a pivotal moment as we scale our digital healthcare platform across Europe - giving you the chance to shape security at the heart of a fast-growing, AI-driven business. We are recruiting an exciting Application Security Engineer on an initial 12 month fixed term contract, with a view to becoming permanent - based in either our London or Bristol office two days per week.About the roleYou will own security across the software development lifecycle, embedding automated security testing into CI/CD pipelines and enabling development teams to ship secure code quickly. This role works closely with UK and France engineering teams.As an experienced Application Security Engineer, your working day will include but not be limited to:DevSecOps and Pipeline SecurityImplement and maintain security testing in GitLab CI pipelinesConfigure and tune SAST, DAST, dependency scanning, and secrets detectionBuild automated security gates that balance rigour with delivery velocityEnable self-serve security tooling for development teamsContribute code and patches to security tooling and configurationsSecure DevelopmentDefine and enforce secure coding standardsConduct security-focused code reviews and threat modelling for new featuresProvide remediation guidance for application vulnerabilitiesTrain and support developers on secure coding practicesVulnerability ManagementTriage, patch and tra