DevSecOps Engineer (Pipeline Security) - AI
HybridLondon, England, United Kingdom
Job Summary
Embed security controls within developer workflows leveraging Claude Code for AI development. Integrate and maintain SAST tools targeting AI-generated code to identify vulnerabilities early. Implement secrets scanning mechanisms to prevent sensitive data exposure in code repositories and pipelines. Design, build, and optimize secure CI/CD pipelines that align with best practices in DevSecOps. Collaborate closely with development, security, and AI teams to ensure seamless security integration without hindering productivity. Conduct security assessments and provide recommendations to improve pipeline security posture. Stay current with emerging security threats and AI development trends to proactively enhance security measures. This 6-month contract requires 3 days onsite in London or Sheffield under IR35 regulations, offering the chance to tackle cutting-edge AI security challenges within a leading financial services environment.
Required Qualifications
- Proven experience in DevSecOps engineering, particularly in pipeline security and automation
- Strong knowledge of CI/CD tools and platforms (e.g., Jenkins, GitLab CI, Azure DevOps)
- Experience with SAST tools and integrating them into development workflows
- Familiarity with secrets management and scanning tools (e.g., HashiCorp Vault, GitGuardian)
- Understanding of AI development workflows and challenges related to AI-generated code security
- Proficiency in scripting and automation (e.g., Python, Bash)
- Good understanding of cloud platforms (AWS, Azure, or GCP) and their security features
- Strong problem-solving skills and ability to work collaboratively in cross-functional teams
- Excellent communication skills to articulate security concepts to technical and non-technical stakeholders
- Proactive mindset with a strong focus on continuous improvement and security innovation
- Ability to manage priorities effectively in a fast-paced, hybrid working environment
- Hybrid role requiring 3 days per week onsite in London or Sheffield
- IR35 regulations apply; the contractor will be engaged under a deemed employment status
Desired Qualifications
- Experience working with Claude Code or similar AI code generation tools
- Knowledge of container security and orchestration platforms (e.g., Docker, Kubernetes)
- Familiarity with compliance frameworks relevant to financial services or regulated industries
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.