Security Engineer (DevSecOps)

Security Engineer (DevSecOps)

Rate - £550 - £650 Inside IR35
Duration - 6 months initial
Location - London once a week on site

Reports to: Head of Security Architecture and Engineering

The role:

This is a hands-on engineering role focused on building security into software as developed and deployed. You'll work across three workstreams alongside three Senior DevSecOps Engineers. You'll pick up work where it's most needed, keep security consistent across all three workstreams and make sure nothing falls between them.

It suits a software, DevOps or platform engineer who has already built security into their day-to-day work and wants to take it further. You'll get exposure to platform, AI and integration security.

What you'll do

• Set up and tune security scanning in CI/CD pipelines, cut down false positives and help developers fix real issues.
• Build shared security modules, policy libraries and templates that all three teams can reuse.
• Review code, infrastructure-as-code and configuration changes for security issues.
• Handle day-to-day vulnerability management, including pen test findings: prioritise what's genuinely exploitable, track fixes and check they've worked.
• Help run threat modelling sessions in IriusRisk and turn the results...