Description

You will drive secure development practices and operationalise security controls across large-scale programs. This role is hybrid.

Responsibilities

• Implement and maintain a Secure Development Framework across active initiatives.
• Architect, implement, and validate advanced security controls within CI/CD pipelines.
• Provide hands-on DevSecOps guidance and assurance throughout all phases of the SDLC.
• Support teams to embed secure coding practices, supply-chain security, and dependency-risk management.
• Define secure DevSecOps patterns, reference architectures, and governance controls.

Required Skills

• 6–10+ years’ experience in DevSecOps, Secure DevOps, or Security Engineering.
• Hands-on experience with GitHub, Azure DevOps, or AWS CodeCommit.
• Strong capability in secure coding principles, supply-chain security, and artifact integrity.
• Advanced experience with container and orchestration security, including build-time and runtime protection.
• Practical experience with IaC, Policy-as-Code, and general scripting.
• Proven ability to design and verify technical security controls across the SDLC.
• Solid understanding of AI/ML security considerations and model-integrity risks.

Preferred Skills

• Familiarity with recognised security-assurance frameworks (e.g., application-security verification standards).
• Experience with AWS.

Key Skills

Education

Any Graduate