DevSecOps Consultant - Contract - Inside IR35

RiverSafe; Sheffield; Hybrid; GBP 75,000 - 110,000; Full time

Job summary

RiverSafe is seeking experienced Senior DevSecOps Consultants to provide technical leadership and security oversight across complex transformation programmes. The role focuses on embedding security into engineering delivery, working with agile delivery pods, architects, engineering teams and senior Cyber Security stakeholders to ensure secure-by-design principles are adopted across the software development lifecycle.

This is a hybrid role and requires 3 days per week on site.

Qualifications

• Experience across DevSecOps, App Security, Cloud Security or Cyber Security Engineering.
• Strong SSDLC understanding and secure-by-design mindset.
• Experience integrating security tooling into CI/CD pipelines.
• Familiarity with SAST/DAST/SCA and container security.

Responsibilities

• Provide DevSecOps expertise across multiple delivery teams and engineering pods.
• Embed security controls and best practices into CI/CD pipelines and cloud-native environments.
• Review solution architectures and technical designs from a security perspective.
• Conduct threat modelling, security assessments and risk reviews.
• Provide security governance, assurance and reporting to senior stakeholders including CISO functions.
• Drive adoption of secure engineering standards and DevSecOps operating models.

Skills

DevSecOps

App Security

Cloud Security

Cyber Security

SSDLC

Tools

CI/CD tooling

SAST

DAST

SCA

Container security

Secrets management

Vulnerability mgmt

Job description

We are seeking experienced Senior DevSecOps Consultants to provide both hands on technical leadership and security oversight across complex technology transformation programmes.

This role will focus on embedding security into engineering delivery, working closely with agile delivery pods, architects, engineering teams, and senior Cyber Security stakeholders to ensure secure-by-design principles are adopted across the software development lifecycle.

** This is a hybrid role and requires 3 days per week on site **

Role

• Provide DevSecOps expertise across multiple delivery teams and engineering pods.
• Embed security controls and best practices into CI/CD pipelines and cloud-native environments.
• Review solution architectures and technical designs from a security perspective.
• Conduct threat modelling, security assessments and risk reviews.
• Provide security governance, assurance and reporting to senior stakeholders, including CISO-led functions.
• Drive adoption of secure engineering standards and DevSecOps operating models.

Skills

• Proven background in DevSecOps, Application Security, Cloud Security, or Cyber Security Engineering.
• Strong understanding of secure software development lifecycle (SSDLC) practices.
• Experience integrating security tooling within CI/CD pipelines.
• Knowledge of SAST, DAST, SCA, container security, secrets management, or vulnerability management tools.
• Experience working within Azure, AWS, or GCP environments.
• Ability to engage with engineers, architects, security teams and senior business stakeholders.