Devsecops Engineer - Sheffield

iBSC; Sheffield; Hybrid; GBP 65,000 - 90,000; Full time

Job summary

iBSC is seeking a DevSecOps Engineer to secure AI-generated code produced by Claude Code, with a focus on embedding security into developer workflows.

Location: Sheffield, with 2 days per week onsite. You will integrate SAST/DAST tools, deploy secrets scanning, and define secure gates for AI-driven development, while instrumenting Claude Code usage for security telemetry and incident response.

Qualifications

• 5+ years DevSecOps/AppSec experience.
• Strong CI/CD expertise with GitHub Actions, GitLab CI, Jenkins.
• Experience with SAST, DAST, and secrets scanning tooling.
• Knowledge of OWASP Top 10 and secure coding practices.
• Scripting skills in Python and Bash.

Responsibilities

• Embed security into developer workflows around Claude Code.
• Integrate SAST tools into CI/CD to scan AI-generated code.
• Deploy secrets scanning on Claude Code outputs and repos.
• Define secure code review gates for AI-assisted development.
• Instrument Claude Code usage for security telemetry (SIEM).
• Support incident response for code-related security events.
• Act as a developer-facing security champion.

Skills

DevSecOps

AppSec

CI/CD

SAST

DAST

Secrets scanning

OWASP Top 10

Secure coding

Python

Bash

Tools

SonarQube

Semgrep

Checkmarx

Trufflehog

GitGuardian

Job description

We are looking for a DevSecOps Engineer who can secure AI-generated code - specifically code produced by Claude Code.

Location: Sheffield (2 days per week onsite)

Core of the role:

• Embed security into developer workflows around Claude Code
• Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code
• Deploy secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repos
• Define secure code review gates for AI-assisted development
• Instrument Claude Code usage for security telemetry- SIEM
• Support incident response for code-related security events
• Act as a developer-facing security champion

Must-haves:

• 5+ years DevSecOps/AppSec
• Strong CI/CD: GitHub Actions, GitLab CI, Jenkins
• SAST, DAST, secrets scanning tooling
• OWASP Top 10, secure coding
• Scripting: Python, Bash, etc.

Nice-to-haves:

• Familiarity with AI code-gen tools and their security implications
• Supply chain security (SBOM, SLSA)
• CSSLP or equivalent cert

The twist: This isn't a generic DevSecOps role - the differentiator is securing AI-generated code and building guardrails around Claude Code usage. If your CV shows standard pipeline security but nothing about AI code generation, LLM outputs, or securing AI-assisted dev workflows,