DevSecops Engineer

Ascendion; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Ascendion seeks an experienced DevSecOps specialist to drive squad-level adoption of secure SDLC practices in London. You will embed dependency scanning, SBOM and security evidence into squad delivery and integrate existing pipelines and dashboards.

You will define governance metrics, craft reusable security playbooks and promote policy compliance across delivery teams in a financial services context.

Qualifications

• Strong secure engineering background with 5+ years in DevSecOps.
• Experience embedding security into delivery teams and governance.
• Hands-on with dependency scanning, SBOM, SAST/SCA and security evidence tooling.

Responsibilities

• Coach squads on secure coding, secure SDLC and security-gate adoption.
• Embed dependency scanning, SBOM and security evidence into squad delivery flow.
• Adopt and integrate existing DevSecOps pipelines, gates and dashboards - never rebuild them.
• Define handoffs, RACI and metrics with the client DevSecOps initiative.
• Produce reusable secure-engineering playbooks and templates.
• Evidence security policy compliance and quality-gate adoption for governance.

Skills

DevSecOps

Secure SDLC

SBOM

Dependency scanning

SAST/SCA

CI/CD pipelines

Azure DevOps

Jenkins

GitHub Actions

Observability

Job description

Location: London, UK (Hybrid - 3 days/week work from office)

Role Purpose:

Drive squad-level adoption of secure SDLC practices and existing DevSecOps outputs - dependency scanning, SBOM, quality gates and security evidence - without duplicating the DevSecOps foundations stream.

Key Responsibilities:

• Coach squads on secure coding, secure SDLC and security-gate adoption.


• Embed dependency scanning, SBOM and security evidence into squad delivery flow.


• Adopt and integrate existing DevSecOps pipelines, gates and dashboards - never rebuild them.


• Define handoffs, RACI and metrics with the client DevSecOps initiative.


• Produce reusable secure-engineering playbooks and templates.


• Evidence security policy compliance and quality-gate adoption for governance.


• Strong Secure Engineering / DevSecOps background (5+ years).


• Hands‑on with dependency scanning, SAST/SCA, SBOM and security evidence tooling.


• CI\/CD quality gates and pipeline integration (Azure DevOps, Jenkins, GitHub Actions).


• Experience embedding security practice into delivery teams rather than gate‑keeping.


• Financial services security and compliance context.


• Observability-aware engineering.


• Obsolescence and dependency‑risk management.