Open roleExternal
DevSecops Engineer
- london, england, United Kingdom
- Permanent·On-site
- Full time
- £90 - £120 Per Hour
Job Description
Location: London, UK (Hybrid - 3 days/week work from office)
Role Purpose:
Drive squad-level adoption of secure SDLC practices and existing DevSecOps outputs - dependency scanning, SBOM, quality gates and security evidence - without duplicating the DevSecOps foundations stream.
Key Responsibilities:
- Coach squads on secure coding, secure SDLC and security-gate adoption.
- Embed dependency scanning, SBOM and security evidence into squad delivery flow.
- Adopt and integrate existing DevSecOps pipelines, gates and dashboards - never rebuild them.
- Define handoffs, RACI and metrics with the client DevSecOps initiative.
- Produce reusable secure-engineering playbooks and templates.
- Evidence security policy compliance and quality-gate adoption for governance.
- Strong Secure Engineering / DevSecOps background (5+ years).
- Hands‑on with dependency scanning, SAST/SCA, SBOM and security evidence tooling.
- CI\/CD quality gates and pipeline integration (Azure DevOps, Jenkins, GitHub Actions).
- Experience embedding security practice into delivery teams rather than gate‑keeping.
- Financial services security and compliance context.
- Observability-aware engineering.
- Obsolescence and dependency‑risk management.