DevSecOps Engineer (Pipeline Security)

Synechron; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Synechron in London and Sheffield seeks a mid-senior DevSecOps professional to embed security controls into AI-driven developer workflows. You will integrate SAST/DAST tools, manage secrets scanning, and enforce secure coding practices across CI/CD pipelines.

The role requires 5+ years in security engineering, strong scripting skills, and familiarity with SBOM/SLSA. You will partner with engineering teams to reduce risk in Claude Code deployments and respond to security incidents.

Qualifications

• 5+ years in DevSecOps or application security.
• Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins).
• Experience with SAST, DAST, and secrets scanning tooling.
• Application security knowledge: OWASP Top 10, secure coding practices.
• Scripting: Python, Bash, or similar.
• Familiarity with AI code generation tools and their security implications.
• Experience with supply chain security (SBOM, SLSA).

Responsibilities

• Integrate SAST tools into CI/CD pipelines to scan AI-generated code.
• Deploy and maintain secrets scanning on Claude Code outputs and repositories.
• Define and enforce secure code review gates for AI-assisted development.
• Provide developer-facing security guidance and embed security champions within engineering teams.
• Instrument Claude Code usage for security telemetry; feed data to SIEM.
• Support incident response for code-related security events.

Skills

DevSecOps

CI/CD pipelines

SAST/DAST tools

OWASP Top 10

Scripting: Python/Bash

AI code security

SBOM & SLSA

Tools

SonarQube

Semgrep

Checkmarx

Trufflehog

GitGuardian

GitHub Actions

GitLab CI

Jenkins

Job description

Job Location: London, UK & Sheffield, UK

Experience: Mid-Senior Level

Work Type: Hybrid / Open for full-time & Contract

About Company:

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 14,700+ and has 55 offices in 20 countries within key global markets. For more information on the company, please visit our website or LinkedIn community.

Diversity, Equity, and Inclusion

Diversity & Inclusion are fundamental to our culture, and Synechron is proud to be an equal opportunity workplace and an affirmative-action employer. Our Diversity, Equity, and Inclusion (DEI) initiative ‘Same Difference’ is committed to fostering an inclusive culture – promoting equality, diversity and an environment that is respectful to all. We strongly believe that a diverse workforce helps build stronger, successful businesses as a global company. We encourage applicants from across diverse backgrounds, race, ethnicities, religion, age, marital status, gender, sexual orientations, or disabilities to apply. We empower our global workforce by offering flexible workplace arrangements, mentoring, internal mobility, learning and development programs, and more.

All employment decisions at Synechron are based on business needs, job requirements and individual qualifications, without regard to the applicant’s gender, gender identity, sexual orientation, race, ethnicity, disabled or veteran status, or any other characteristic protected by law.

Purpose:

Embed security controls into the developer workflows that use Claude Code, including SAST integration on AI-generated code, secrets scanning, and secure CI/CD pipeline design.

Key Responsibilities:

• Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code.
• Deploy and maintain secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repositories.
• Define and enforce secure code review gates for AI-assisted development.
• Provide developer-facing security guidance and embed security champions within engineering teams.
• Instrument Claude Code usage for security telemetry; feed data to SIEM.
• Support incident response for code-related security events.

Required Skills:

• 5+ years in DevSecOps or application security.
• Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins).
• Experience with SAST, DAST, and secrets scanning tooling.
• Application security knowledge: OWASP Top 10, secure coding practices.
• Scripting: Python, Bash, or similar.
• Familiarity with AI code generation tools and their security implications.
• Experience with supply chain security (SBOM, SLSA).