DevSecOps Consultant - Contract - Inside IR35

We are seeking experienced Senior DevSecOps Consultants to provide both hands on technical leadership and security oversight across complex technology transformation programmes.

This role will focus on embedding security into engineering delivery, working closely with agile delivery pods, architects, engineering teams, and senior Cyber Security stakeholders to ensure secure-by-design principles are adopted across the software development lifecycle.

** This is a hybrid role and requires 3 days per week on site **

Role

• Provide DevSecOps expertise across multiple delivery teams and engineering pods.
• Embed security controls and best practices into CI/CD pipelines and cloud-native environments.
• Review solution architectures and technical designs from a security perspective.
• Conduct threat modelling, security assessments and risk reviews.
• Provide security governance, assurance and reporting to senior stakeholders, including CISO-led functions.
• Drive adoption of secure engineering standards and DevSecOps operating models.

Skills

• Proven background in DevSecOps, Application Security, Cloud Security, or Cyber Security Engineering.
• Strong understanding of secure software development lifecycle (SSDLC) practices.
• Experience integrating security tooling within CI/CD pipelines.
• Knowledge of SAST, DAST, SCA, container security, secrets management, or vulnerability management tools.
• Experience working within Azure, AWS, or GCP environments.
• Ability to engage with engineers, architects, security teams and senior business stakeholders.