Senior SecOps Specialist

London Source: WhatJobs

See advert for pay

Overview

As a Senior DevSecOps Engineer at Teya, you will embed automated security controls across CI/CD, cloud platforms, and developer workflows to enable secure delivery at scale. You will build and operate internal security tooling, focusing on fast, low-noise feedback and a great developer experience. You’ll collaborate with platform, cloud, AppSec, and SecOps teams to deliver scalable, reliable security capabilities. This role combines engineering rigor with security enablement to protect fintech workloads and empower engineers.

Responsibilities

Integrate security checks (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines and provide actionable feedback to developers
Embed infrastructure and application scanning into automated deployments
Design, build, and operate internal security services, APIs, CLIs, and automation workflows
Apply software engineering practices to security tooling, including testing, observability, and version control
Treat security tooling as a product with clear documentation and support
Implement policy-as-code guardrails for IaC, Kubernetes manifests, cloud accounts and identity configurations
Collaborate with platform teams to define secure defaults and self-service patterns
Support vulnerability scanning platforms and security telemetry pipelines
Ensure structured security data flows to SIEM/log platforms and enable automated responses
Champion secure engineering practices and drive enablement activities (guides, training)
Leverage automation and AI to reduce manual toil and improve security findings
Define and track metrics such as time-to-feedback, signal-to-noise, and tooling adoption
Lead blameless post-incident reviews and continuous improvement
Maintain end-to-end ownership for outcomes and focus on risk reduction and adoption

Key requirements

5+ years in security engineering, DevSecOps, or platform engineering with security integration experience
Hands-on experience embedding security into CI/CD (SAST/DAST/SCA, container scanning, secrets detection)
Proficiency with CI/CD platforms (GitHub Actions, GitLab CI, Jenkins) and IaC (Terraform)
Strong software engineering and automation skills (Python, Go, Bash)
Deep cloud-native experience (AWS) including IAM, networking, and logging
Experience designing and implementing policy-as-code and security guardrails
Ability to collaborate cross-functionally, balancing security with delivery velocity