Mission
We are looking for a DevSecOps Engineer to design and implement secure development and build pipelines across our engineering environments. This role focuses on embedding security into CI/CD processes, with a particular emphasis on AI‑assisted development. You will ensure that code generation, integration, and deployment processes are secure, auditable, and resilient to emerging risks. You will work across engineering teams to establish secure, scalable, and automated pipelines, with a strong awareness of cloud environments, software supply chain risks, and the security challenges introduced by AI‑driven development workflows.
Role and Responsibilities
* Design, build, and maintain secure CI/CD pipelines for application and product development
* Embed and enforce security controls within build and deployment processes (e.g. SAST, dependency scanning, secrets management)
* Secure AI‑assisted development workflows, including validation of generated code and control of inputs/outputs
* Define and implement guardrails for the use of AI‑assisted development within build and delivery workflows
* Identify and mitigate risks associated with AI‑generated code, including insecure patterns, data leakage, and misuse
* Ensure secure handling of credentials, secrets, and artifacts throughout the build and deployment lifecycle
* Implement and manage security tooling within pipelines to enable early detection of vulnerabilities
* Support secure configuration and operation of cloud‑based development and build environments
* Monitor and improve the security of the software supply chain, including dependencies and build artifacts
* Work with engineering teams to ensure secure build, test, and deployment practices are consistently applied and adhered to
* Define and enforce minimum security standards for build pipelines and development workflows
* Continuously improve pipeline security, automation, and reliability
Skills & Experience
* Experience working in a DevSecOps or security‑focused engineering role, with hands‑on responsibility for designing and securing CI/CD pipelines (typically 2–5 years or equivalent)
* Experience with CI/CD platforms (e.g. Bitbucket, GitLab, GitHub Actions, Azure DevOps)
* Strong understanding of DevSecOps principles and secure software delivery practices
* Practical understanding of security risks in AI‑assisted development (e.g. prompt injection, insecure code generation, data leakage)
* Experience or familiarity with AI/ML tooling used in development workflows
* Knowledge of cloud platforms (e.g. AWS, Azure, GCP) and associated security considerations
* Experience integrating security tooling into pipelines (e.g. SAST, SCA, secrets scanning)
* Strong scripting or programming ability (e.g. Python, Bash, or similar)
* Understanding of software supply chain risks and dependency management
* Familiarity with containers and orchestration (e.g. Docker, Kubernetes) is advantageous
* Strong problem‑solving ability and attention to detail
Additional Context
This role is responsible for securing the development and build lifecycle, ensuring that modern practices—including AI‑assisted development—are implemented securely and with appropriate controls. It complements the wider security function by addressing risks in how software is built and delivered.
What we have to offer you
* An excellent work environment and an opportunity to make a difference.
* Salary commensurate with level of experience.
* Company pension contribution matched up to 10%.
* 25 days annual holiday + 8 Bank holidays.
* Medical Insurance.
* Dental Insurance.
* Salary sacrifice initiatives (EV Scheme, Cycle 2 Work, Tech Scheme)
* Discretionary annual company bonus.
#J-18808-Ljbffr