Application Security Technical Lead

About the role

MedHealth is seeking an experienced Application Security Technical Lead to own and run application security across its portfolio. This hands‑on role will embed security practices, tooling and processes into development workflows while supporting multiple engineering teams.

Key responsibilities

• Own and operate application security throughout the software development lifecycle.
• Identify, assess and remediate application security risks in partnership with engineering.
• Perform secure code reviews (primarily .NET) and champion secure development practices.
• Lead threat modelling, security assessments and automation workflows.
• Manage and optimise AppSec tooling (SAST, DAST, SCA) in CI/CD pipelines.
• Provide vulnerability visibility, prioritisation and reporting without slowing delivery.
• Establish secure design standards and mentor developers as Security Champions.

Required profile

• 5+ years of software engineering experience, including at least 2 years in an application security role.
• Proven ability to work across teams with varying security maturity and adapt approaches based on risk and delivery context.
• Self‑driven, accountable and strong at stakeholder engagement.

Required skills

• .NET / C# code review and secure coding.
• DevSecOps experience in CI/CD environments.
• Hands‑on with AppSec tools: SAST, DAST, SCA.
• Azure cloud and Azure DevOps pipelines.
• Understanding of OWASP Top 10 and secure design principles.

What we offer

• Opportunity to own and run a mature Application Security capability.
• Work across a diverse application landscape and multiple engineering teams.
• Culture focused on continuous improvement, learning and knowledge sharing.
• Hybrid work model with a balance of remote and office collaboration.
• Inclusive, equal‑opportunity environment supporting diverse backgrounds.