DevSecops Engineer

Job Title: DevSecops Adoption Practitioner

Location: London, UK (Hybrid - 3 days/week work from office)

Role Purpose:

Drive squad-level adoption of secure SDLC practices and existing DevSecOps outputs - dependency scanning, SBOM, quality gates and security evidence - without duplicating the DevSecOps foundations stream.

Key Responsibilities:

• Coach squads on secure coding, secure SDLC and security-gate adoption.
• Embed dependency scanning, SBOM and security evidence into squad delivery flow.
• Adopt and integrate existing DevSecOps pipelines, gates and dashboards - never rebuild them.
• Define handoffs, RACI and metrics with the client DevSecOps initiative.
• Produce reusable secure-engineering playbooks and templates.
• Evidence security policy compliance and quality-gate adoption for governance.

Essential Skills & Experience:

• Strong Secure Engineering / DevSecOps background (5+ years).
• Hands-on with dependency scanning, SAST/SCA, SBOM and security evidence tooling.
• CI/CD quality gates and pipeline integration (Azure DevOps, Jenkins, GitHub Actions).
• Secure coding standards across common enterprise languages.
• Experience embedding security practice into delivery teams rather than gate-keeping.

Desirable:

• Financial services security and compliance context.
• Observability-aware engineering.
• Obsolescence and dependency-risk management.