Description

You will operate as a trusted technical authority, driving secure development practices across large-scale programs.

Responsibilities

• Implement and operationalise a Secure Development Framework across active development initiatives.
• Provide hands-on DevSecOps guidance and assurance throughout all phases of the SDLC.
• Define, enhance, and maintain secure DevSecOps patterns, reference architectures, and governance controls.
• Architect, implement, and validate advanced security controls within CI/CD pipelines.
• Support development teams to embed secure coding practices, supply-chain security, and dependency-risk management.

Required Skills

• 6–10+ years’ experience in DevSecOps, Secure DevOps, or Security Engineering roles in complex environments.
• Deep hands-on experience with GitHub, Azure DevOps, or AWS CodeCommit and modern CI/CD architectures.
• Strong capability across secure coding principles, software supply-chain security, dependency risk management, and artifact integrity controls.
• Advanced experience with container and orchestration security, including build-time and runtime protection and admission controls.
• Proven ability to design, implement, and independently verify technical security controls across the SDLC.
• Practical experience with secure SDLC frameworks, threat modelling practices, and Zero-Trust approaches.
• Solid understanding of AI/ML security considerations, including model-integrity risks and secure pipeline design.
• Experience with IaC and/or Policy-as-Code, and general scripting or software-development skills.
• Demonstrated success influencing architectural decisions and uplifting multi-team engineering practices.

Preferred Skills

• Familiarity with recognised security-assurance frameworks (e.g., application-security verification standards).
• Experience with AWS.

Key Skills

Education

Any Graduate