DevSecOps Coach: Secure SDLC & Dependency Governance

Ascendion; United Kingdom; On-site; GBP 70,000 - 100,000; Full time

Job summary

Ascendion is seeking an experienced DevSecOps professional to lead secure SDLC adoption across squads. You will coach on secure coding, embed SBOM, dependency scanning, and security evidence into delivery flows, and integrate existing pipelines (Azure DevOps, Jenkins, GitHub Actions) without rebuilding them.

You will drive governance metrics, produce secure playbooks, and apply security practices within delivery teams, with a strong emphasis on financial services security context.

Qualifications

• 5+ years in secure engineering / DevSecOps.
• Hands-on with dependency scanning, SAST/SCA, SBOM.
• Experience in financial services security and compliance.
• Observability-aware engineering.

Responsibilities

• Coach squads on secure coding and SDLC.
• Embed dependency scanning, SBOM and security evidence into squad delivery flow.
• Adopt and integrate existing DevSecOps pipelines, gates and dashboards - never rebuild them.
• Define handoffs, RACI and metrics with the project DevSecOps initiative.
• Produce reusable secure-engineering playbooks and templates.
• Evidence security policy compliance and quality-gate adoption for governance.
• Strong secure engineering / DevSecOps background (5+ years).
• Hands-on with dependency scanning, SAST/SCA tooling.
• CI/CD quality gates and pipeline integration.
• Experience embedding security practice into delivery teams rather than gate-keeping.
• Financial services security and compliance context.
• Observability-aware engineering.
• Obsolescence and dependency-risk management.

Skills

Secure SDLC

DevSecOps

Secure coding

Dependency scanning

SBOM

Security evidence

CI/CD gates

Azure DevOps

Jenkins

GitHub Actions

Security governance

Observability

SAST

SCA

Tools

Azure DevOps

Jenkins

GitHub Actions

SBOM tooling

SAST tooling

SCA tooling

Job description

Ascendion is seeking an experienced DevSecOps professional to lead secure SDLC adoption across squads. You will coach on secure coding, embed SBOM, dependency scanning, and security evidence into delivery flows, and integrate existing pipelines (Azure DevOps, Jenkins, GitHub Actions) without rebuilding them.

You will drive governance metrics, produce secure playbooks, and apply security practices within delivery teams, with a strong emphasis on financial services security context.