Sr DevSecOps Engineer
Core
Embed security governance into the software delivery lifecycle by translating requirements into clear policies and automated controls for source control, CI/CD pipelines, build infrastructure, and the software supply chain.
Role type
Senior DevSecOps Engineer (Enterprise Developer Platform)
Builds
Automated security controls, policies, and guardrails for the developer toolchain and CI/CD environments.
Domain
Enterprise Software Development, Cloud Security, DevSecOps
Required skills
CI/CD pipeline automation, SAST/SCA/Secrets scanning, Infrastructure as Code (Terraform/CDK), AWS security, Identity and Access Management (IAM/SSO), Scripting (Python/Bash), Security policy design, Supply chain security (SBOM/Artifact management), Cloud security posture management (CSPM)
Preferred skills
AI tool governance, Policy as code (OPA/Sentinel), Kubernetes (CKA/CKAD), AWS Solutions Architect certification, Open-source Backstage contributions
Technologies
GitHub Enterprise Cloud, GitHub Actions, SonarQube, Checkmarx, Wiz, JFrog Artifactory, Vault, Okta, Terraform, AWS (EC2/ECS/EKS/Lambda/S3/IAM), Splunk, Python, Bash
Responsibilities
Define and implement baseline security policies and automated guardrails across source control and CI/CD environments; Integrate, manage and tune code quality and application security tools within developer workflows; Triage security findings, prioritise vulnerabilities by risk and track remediation; Establish governance for credentials, secrets and non-human identities; Harden build infrastructure and software supply chain controls; Provision, secure and optimise AWS services supporting the developer platform; Contribute to governance for AI-assisted development tools and developer endpoint security; Monitor sensitive configuration changes, implement alerting and support audit and compliance activities; Partner with platform and engineering teams to automate security controls and drive adoption.
Seniority
Senior, hands-on IC
