DevSecOps Engineer

Change Digital – Digital & Tech Recruitment; City of Edinburgh; On-site; GBP 90,000 - 120,000; Full time

Job summary

Change Digital is partnering with a leading organisation undergoing a major platform transformation to embed security into software delivery at scale.

The Senior Product Security Engineer will build secure-by-default engineering platforms, automate vulnerability remediation and integrate SAST, DAST, SCA and IaC checks into CI/CD with GitLab or GitHub Actions. You will collaborate with development teams and drive secure design and cloud security practices.

Qualifications

• Strong Product Security, Application Security or DevSecOps experience.
• Software engineering background with Python, Java and/or TypeScript.
• Experience building security into CI/CD pipelines at scale.
• Strong knowledge of SAST, DAST, SCA, Secrets Scanning and IaC Security.
• Experience working with GitLab, GitHub Actions or similar CI/CD platforms.
• AWS, container and cloud security experience.
• Strong understanding of OWASP Top 10, secure design and modern application security practices.

Responsibilities

• Build secure-by-default CI/CD pipelines and reusable security components.
• Embed SAST, SCA, DAST, secret scanning and IaC security checks into engineering workflows.
• Improve vulnerability visibility, prioritisation and CVE remediation speed.
• Partner directly with development teams to solve complex security challenges.
• Facilitate threat modelling and provide secure design guidance.
• Drive software supply chain security, dependency governance and secure development standards.
• Define practical guardrails for AI-assisted development and AI-enabled products.
• Champion a "paved road" approach where secure delivery is the easiest option for engineers.

Skills

Product Security

Application Security

DevSecOps

Python

Java

TypeScript

CI/CD pipelines

SAST

DAST

SCA

Secrets Scanning

IaC Security

GitLab

GitHub Actions

AWS

Container Security

OWASP Top 10

Tools

GitLab

GitHub Actions

AWS

Job description

Change Digital is partnering with a leading organisation undergoing a major platform transformation and is seeking a Senior Product Security Engineer to help embed security into software delivery at scale.

This is a hands-on role focused on building secure-by-default engineering platforms, improving developer experience, and accelerating vulnerability remediation through automation rather than manual security reviews.

What You'll Be Doing

• Build secure-by-default CI/CD pipelines and reusable security components
• Embed SAST, SCA, DAST, secret scanning and IaC security checks into engineering workflows
• Improve vulnerability visibility, prioritisation and CVE remediation speed
• Partner directly with development teams to solve complex security challenges
• Facilitate threat modelling and provide secure design guidance
• Drive software supply chain security, dependency governance and secure development standards
• Define practical guardrails for AI-assisted development and AI-enabled products
• Champion a "paved road" approach where secure delivery is the easiest option for engineers

What We're Looking For

• Strong Product Security, Application Security or DevSecOps experience
• Software engineering background with Python, Java and/or TypeScript
• Experience building security into CI/CD pipelines at scale
• Strong knowledge of SAST, DAST, SCA, Secrets Scanning and IaC Security
• Experience working with GitLab, GitHub Actions or similar CI/CD platforms
• AWS, container and cloud security experience
• Strong understanding of OWASP Top 10, secure design and modern application security practices

This is an excellent opportunity to join a high-impact security programme where you'll help shape secure software delivery across a large engineering organisation.