DevSecOps Engineer - Sheffield

Project overview

We are looking for a DevSecOps Engineer who can secure AI-generated code - specifically code produced by Claude Code.

Project details

Sheffield (2 days per week onsite)

Core of the role:

Must-haves:

Nice-to-haves:

The twist: This isn't a generic DevSecOps role - the differentiator is securing AI-generated code and building guardrails around Claude Code usage. If your CV shows standard pipeline security but nothing about AI code generation, LLM outputs, or securing AI-assisted dev workflows,

• Embed security into developer workflows around Claude Code
• Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code
• Deploy secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repos
• Define secure code review gates for AI-assisted development
• Instrument Claude Code usage for security telemetry
• SIEM
• Support incident response for code-related security events
• Act as a developer-facing security champion
• 5+ years DevSecOps/AppSec
• Strong CI/CD: GitHub Actions, GitLab CI, Jenkins
• SAST, DAST, secrets scanning tooling
• OWASP Top 10, secure coding
• Scripting: Python, Bash, etc.
• Familiarity with AI code-gen tools and their security implications
• Supply chain security (SBOM, SLSA)
• CSSLP or equivalent cert
• Start: flexible
• Duration: 6 months
• Remote: hybrid
• Location: Yorkshire, United Kingdom, GB