Lead DevSecOps Engineer - Security Cleared

This position is responsible for ensuring that security is built into every part of the development life cycle, specifically ensuring that security tooling (native and non-native) is properly Embedded into CI/CD pipelines. The role holder will be part of our client's transformation programmes including tech debt replacement and migration, embedding security to ensure seamless integration of new systems/features and workflows.

The Lead DevSecOps role will be responsible for ensuring that the replacement systems are security compliant, adhering to standards, and utilising a shift left mentality to fix problems before production. This is as part of highly complex Legacy replacements involving approximately 90,000 users.

Essential Skills and Experience:

• Strong hands-on expertise in DevSecOps practices, particularly security automation in CI/CD and infrastructure-as-code pipelines.
• Deep understanding of modern DevOps tooling (eg, GitHub Actions/CircleCI, Terraform, Kubernetes, Docker) with secure configurations.
• Experience implementing security controls in cloud-native environments (eg, AWS or Azure) including IAM, network policies, and container security.
• Proven track record of using tools such as Snyk, Trivy, Checkov, OPA/Gatekeeper/OWASP ZAP, or similar to enforce pipeline and platform security.
• Familiarity with compliance requirements (eg, NIST, ISO 27001, CIS Benchmarks) and their implementation via code.
• Ability to lead and mentor teams on secure coding, threat modelling, and secure architecture patterns.
• Experience with monitoring, logging, and security telemetry platforms (eg, Prometheus, Loki, ELK, XDR/SIEM integrations).

If you feel you have the skills and experience needed for this role; please do apply now.