Sr DevSecOps Engineer
Core
Embed security governance into the software delivery lifecycle by translating requirements into clear policies and automated controls for source control, CI/CD pipelines, build infrastructure, and the software supply chain.
Role type
Senior DevSecOps Engineer (Enterprise Developer Platform)
Builds
Automated security controls, policies, and guardrails for the developer toolchain and SDLC.
Domain
Enterprise Software Development, Cloud Security, DevSecOps
Required skills
CI/CD pipeline automation, SAST/SCA/Secrets scanning, Infrastructure as Code (Terraform/CDK), AWS security, Identity and Access Management (IAM/SSO), Scripting (Python/Bash), Security policy design, Supply chain security (SBOM/Artifact management), Cloud security posture management (CSPM)
Preferred skills
AI tool governance, Policy as code (OPA/Sentinel), Kubernetes (CKA/CKAD), AWS Solutions Architect certification, Open-source Backstage contributions
Technologies
GitHub Enterprise Cloud, GitHub Actions, SonarQube, Checkmarx, Wiz, JFrog Artifactory, Vault, Okta, Terraform, AWS (EC2/ECS/EKS/Lambda/S3/IAM), Splunk, Python, Bash
Responsibilities
Define and implement baseline security policies and automated guardrails across source control and CI/CD environments; Integrate, manage and tune code quality and application security tools within developer workflows; Triage security findings, prioritise vulnerabilities by risk and track remediation; Establish governance for credentials, secrets and non-human identities; Harden build infrastructure and software supply chain controls; Provision, secure and optimise AWS services supporting the developer platform; Contribute to governance for AI-assisted development tools and developer endpoint security; Monitor sensitive configuration changes, implement alerting and support audit and compliance activities; Partner with platform and engineering teams to automate security controls and drive adoption.
Seniority
Senior, hands-on IC
