AI Code Security DevSecOps Engineer

Synechron; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Synechron in London and Sheffield seeks a mid-senior DevSecOps professional to embed security controls into AI-driven developer workflows. You will integrate SAST/DAST tools, manage secrets scanning, and enforce secure coding practices across CI/CD pipelines.

The role requires 5+ years in security engineering, strong scripting skills, and familiarity with SBOM/SLSA. You will partner with engineering teams to reduce risk in Claude Code deployments and respond to security incidents.

Qualifications

• 5+ years in DevSecOps or application security.
• Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins).
• Experience with SAST, DAST, and secrets scanning tooling.
• Application security knowledge: OWASP Top 10, secure coding practices.
• Scripting: Python, Bash, or similar.
• Familiarity with AI code generation tools and their security implications.
• Experience with supply chain security (SBOM, SLSA).

Responsibilities

• Integrate SAST tools into CI/CD pipelines to scan AI-generated code.
• Deploy and maintain secrets scanning on Claude Code outputs and repositories.
• Define and enforce secure code review gates for AI-assisted development.
• Provide developer-facing security guidance and embed security champions within engineering teams.
• Instrument Claude Code usage for security telemetry; feed data to SIEM.
• Support incident response for code-related security events.

Skills

DevSecOps

CI/CD pipelines

SAST/DAST tools

OWASP Top 10

Scripting: Python/Bash

AI code security

SBOM & SLSA

Tools

SonarQube

Semgrep

Checkmarx

Trufflehog

GitGuardian

GitHub Actions

GitLab CI

Jenkins

Job description

Synechron in London and Sheffield seeks a mid-senior DevSecOps professional to embed security controls into AI-driven developer workflows. You will integrate SAST/DAST tools, manage secrets scanning, and enforce secure coding practices across CI/CD pipelines.

The role requires 5+ years in security engineering, strong scripting skills, and familiarity with SBOM/SLSA. You will partner with engineering teams to reduce risk in Claude Code deployments and respond to security incidents.