Hybrid DevSecOps Engineer for Secure SDLC & Dependency Risk

Ascendion; Greater London; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Ascendion seeks an experienced DevSecOps specialist to drive squad-level adoption of secure SDLC practices in London. You will embed dependency scanning, SBOM and security evidence into squad delivery and integrate existing pipelines and dashboards.

You will define governance metrics, craft reusable security playbooks and promote policy compliance across delivery teams in a financial services context.

Qualifications

• Strong secure engineering background with 5+ years in DevSecOps.
• Experience embedding security into delivery teams and governance.
• Hands-on with dependency scanning, SBOM, SAST/SCA and security evidence tooling.

Responsibilities

• Coach squads on secure coding, secure SDLC and security-gate adoption.
• Embed dependency scanning, SBOM and security evidence into squad delivery flow.
• Adopt and integrate existing DevSecOps pipelines, gates and dashboards - never rebuild them.
• Define handoffs, RACI and metrics with the client DevSecOps initiative.
• Produce reusable secure-engineering playbooks and templates.
• Evidence security policy compliance and quality-gate adoption for governance.

Skills

DevSecOps

Secure SDLC

SBOM

Dependency scanning

SAST/SCA

CI/CD pipelines

Azure DevOps

Jenkins

GitHub Actions

Observability

Job description

Ascendion seeks an experienced DevSecOps specialist to drive squad-level adoption of secure SDLC practices in London. You will embed dependency scanning, SBOM and security evidence into squad delivery and integrate existing pipelines and dashboards.

You will define governance metrics, craft reusable security playbooks and promote policy compliance across delivery teams in a financial services context.