DevSecOps Engineer

Stealth AI Startup (Policing); Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Stealth AI Startup (Policing) in the United Kingdom seeks a DevSecOps engineer to own how we build, ship and secure everything across cloud and on‑prem environments.

This build‑it‑from‑scratch role focuses on securing our infrastructure, implementing guardrails for regulated data, and making security an enabling default for the engineers who follow.

Qualifications

• Own CI/CD and infrastructure-as-code in production.
• Strong cloud security fundamentals: IAM and least-privilege, secrets management, network security, encryption and key management.
• Hands-on application and supply-chain security: pipeline scanning, container hardening, dependency and vulnerability management.
• Bonus: experience shipping the same app to both managed cloud and on‑prem or air‑gapped environments; familiarity with regulated data; knowledge of Cyber Essentials, ISO 27001 or SOC 2.

Responsibilities

• Own how we build, ship and secure everything across cloud and on‑prem deployments.
• Set guardrails around how regulated data is stored and accessed.
• Make security an enabling default rather than a gate.
• Dedicate to security and platform, setting the patterns future engineers inherit.

Skills

CI/CD ownership

Infrastructure as code

Cloud security fundamentals

IAM and least privilege

Secrets management

Network security

Encryption and key management

Pipeline scanning

Container hardening

Dependency & vulnerability management

Tools

AWS

On-prem deployments

Job description

We're building technology for public safety. We handle sensitive, regulated data and deploy into environments where security and accountability are non-negotiable.

Focus of the role: We're looking for a DevSecOps engineer to own how we build, ship and secure everything, across cloud and on-premises deployments. This is a build-it-from-the-ground-up role: secure our cloud and on-prem infrastructure, put guardrails around how regulated data is stored and accessed, and make security an enabling default rather than a gate. You'd be dedicated to security and platform, setting the patterns the next engineers inherit.

Qualifications: You've owned CI/CD and infrastructure-as-code in production, ideally at startup pace. Strong cloud security fundamentals: IAM and least-privilege, secrets management, network security, encryption and key management (AWS preferred, equivalent cloud fine). Hands-on application and supply-chain security: pipeline scanning, container hardening, dependency and vulnerability management. Bonus if you've shipped the same application to both managed cloud and on-prem or air-gapped environments, worked with regulated data, or know Cyber Essentials, ISO 27001 or SOC 2 in practice.