Security Engineer

Job Description

AXA is embarking on its most radical and ambitious change programme in the history of its Healthcare business. Driven by a changing UK health landscape, the growth in the (preventative) Wellbeing sector, and the need for radical simplification, we are uniting several businesses internally to produce a stronger offering than ever before in our mission to empower people to be the best version of themselves.   

As a Security Engineer, you’ll provide hands-on technical expertise to guide software development, delivery and continuous improvement focusing on risk and security. You’ll help evolve our new Digital Platform so that its secure and compliant with both internal and industry regulations. You’ll analyse new feature code to identify security risks and work with engineers to mitigate them, working and applying modern security standards such as OWASP CI/CD, DSOMM, SAMM and Cloud Security Posture management systems such as Azure Defender and Prisma Cloud.  At AXA we work smart, empowering our people to balance their time between home and the office in a way that works best for them, their team and our customers. You'll work at least 40% of your week away from home, moving to the majority of your working week from September 2025. Away from home means either attendance at one of our office locations, visiting clients or attending industry events. We’re also happy to consider flexible working arrangements, which you can discuss with Talent Acquisition. 

What you’ll be doing: 

• Analysing new feature code to identify security risks and working with engineers to mitigate  
• Delivering improvements to our DSOMM score, either working with teams or directly taking responsibility for tasks (writing code, configuration, tooling, documentation) 
• Working with our Information Security teams to ensure security policies are implemented in the most efficient and flexible manner
• Designing, building, operating and monitoring technology for large, complex multi-site b2c and b2b applications 
• Contributing to the definition of, adhering to and upholding coding standards and our software delivery lifecycle to ensure the delivery of secure, quality systems
• Designing, building, operating and optimising logging technology to allow more data to be gathered about sites holistic performance and reliability 

Due to the number of applications we expect to receive for this role, we reserve the right to close this advert earlier than the listed closing date to ensure we’re able to effectively manage interest. Therefore, if you’re interested in joining us at AXA, please don’t hesitate to apply. 

What you’ll bring:

• Engineering expertise in complicated Salesforce environments
• Exposure to Cloud Native software development, including cloud infrastructure and API design (Azure preferred)
• Proven experience applying modern standards such as OWASP CI/CD, DSOMM, SAMM etc
• Strong networking protocol knowledge (TCP/IP, UDP, HTTP/3, AMQP, streaming protocols etc), cloud network design (VPNs, subnets, regions/zones etc), and integration related technologies (Auth0, APIM) 
• Expertise with SAST & SCA systems such as Snyk, Checkmarx 
• Experience with DAST systems such as OpenZAP, Qualys DAST (preferred) ideally with HTTP APIs 
• Ability to manage large scale software estates from a operational perspective (build, release, monitoring, rollbacks, high availability, etc) 
• Hands on experience building automated security test suites

As a precondition of employment for this role, you must be eligible and authorised to work in the United Kingdom.

What we offer: 

At AXA UK, we’re appreciative of the people who work for us and our rewards package is reviewed regularly to reflect that. You can expect to receive:

• Competitive annual salary dependent on experience 
• Annual company & performance-based bonus
• Contributory pension scheme (up to 12% employer contributions)
• Life Assurance (up to 10 x annual salary)
• 28 days annual leave plus Bank Holidays
• Opportunity to buy up to 5 extra days leave or sell up to 5 days leave
• AXA employee discounts
• Gym benefits

To apply, click on the ‘apply for this job’ button, you’ll then need to log in or create a profile to submit your CV. We’re proud to be an Equal Opportunities Employer and don’t discriminate against employees or potential employees based on protected characteristics. If you have a long-term condition or disability and require adjustments during the application or interview process, we’re proud to offer access to the AXA Accessibility Concierge. For our support, please send an email to lauren.standen@axa-insurance.co.uk. 

#FeelgoodHealth #LI-Hybrid 

Who we are: 

At AXA Health, we help our members be the best version of themselves by providing access to health and wellbeing support for mind and body. We’re transforming our business by developing easy, efficient, digital experiences for our customers. We’re a collective of specialists passionate about helping our members flourish, whether that’s individuals and families, small businesses or huge corporates. 

Salary