Job description
Project overview
DevSecOps Engineer
Role Purpose
Embed security controls into the developer workflows that use Claude Code, including SAST integration on AI-generated code, secrets scanning, and secure CI/CD pipeline design.
Key Responsibilities
Required Skills/Experience
Desirable Skills/Experience
- Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code.
- Deploy and maintain secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repositories.
- Define and enforce secure code review gates for AI-assisted development.
- Provide developer-facing security guidance and embed security champions within engineering teams.
- Instrument Claude Code usage for security telemetry; feed data to SIEM.
- Support incident response for code-related security events.
- 5+ years in DevSecOps or application security.
- Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins).
- Experience with SAST, DAST, and secrets scanning tooling.
- Application security knowledge: OWASP Top 10, secure coding practices.
- Scripting: Python, Bash, or similar.
- Familiarity with AI code generation tools and their security implications.
- Experience with supply chain security (SBOM, SLSA).
- CSSLP or equivalent certification.
Project details
- Start: ASAP - 1 Weeks Notice
- Duration: 6 Months (Extendable)
- Location: Sheffield, UK, GB
Indexed by 9am's meta-search. You are a job provider? Claim or manage this listing
Found on JobServe