DevSecops Engineer

Location: London, UK (Hybrid - 3 days/week work from office)

Role Purpose:

Drive squad-level adoption of secure SDLC practices and existing DevSecOps outputs - dependency scanning, SBOM, quality gates and security evidence - without duplicating the DevSecOps foundations stream.

Key Responsibilities:

• Coach squads on secure coding, secure SDLC and security-gate adoption.
• Embed dependency scanning, SBOM and security evidence into squad delivery flow.
• Adopt and integrate existing DevSecOps pipelines, gates and dashboards - never rebuild them.
• Define handoffs, RACI and metrics with the client DevSecOps initiative.
• Produce reusable secure-engineering playbooks and templates.
• Evidence security policy compliance and quality-gate adoption for governance.
• Strong Secure Engineering / DevSecOps background (5+ years).
• Hands‑on with dependency scanning, SAST/SCA, SBOM and security evidence tooling.
• CI\/CD quality gates and pipeline integration (Azure DevOps, Jenkins, GitHub Actions).
• Experience embedding security practice into delivery teams rather than gate‑keeping.
• Financial services security and compliance context.
• Observability-aware engineering.
• Obsolescence and dependency‑risk management.

#J-18808-Ljbffr

Full job description from WhatJobs. Apply for this role →