AI-Driven DevSecOps Engineer - Secure CI/CD & SBOM

Gazelle Global; Sheffield; On-site; GBP 65,000 - 90,000; Full time

Job summary

Gazelle Global, in the United Kingdom, seeks a proactive DevSecOps professional to embed security controls into CI/CD for AI-generated code, including SAST, secrets scanning and secure pipeline design.

You will collaborate with engineering to remediate findings, drive SBOM provenance, and implement policy-as-code guardrails, combining strong communication and leadership in client-facing settings.

Qualifications

• Experience in DevSecOps with CI/CD pipelines and security tooling.
• Strong client-facing communication, leadership and collaboration abilities.

Responsibilities

• Embed security controls into CI/CD for AI-generated code (SAST, secrets scanning, dependency and container scanning)
• Implement policy-as-code guardrails and secure pipeline patterns for agentic SDLC
• Drive software supply chain security (SBOM, signed artifacts, provenance)
• Partner with engineering to remediate findings and reduce time-to-fix

Skills

DevSecOps

CI/CD

SAST/DAST

Secrets scanning

Dependency scanning

Container scanning

SBOM/provenance

Policy-as-code

Infrastructure-as-code security

Tools

GitHub

GitLab

Jenkins

Job description

Gazelle Global, in the United Kingdom, seeks a proactive DevSecOps professional to embed security controls into CI/CD for AI-generated code, including SAST, secrets scanning and secure pipeline design.

You will collaborate with engineering to remediate findings, drive SBOM provenance, and implement policy-as-code guardrails, combining strong communication and leadership in client-facing settings.