Lead DevSecOps Engineer

trg.; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Benefits offered by this job

Private medical

Life insurance

Critical illness cover

Salary sacrifice

Pension

Job summary

trg. in London is seeking its first dedicated security hire to own security end-to-end for AI/LLM powered products; you'll threat model new features, drive CVE remediation, manage scanning tooling, perform pen tests and incident response.

You'll shape the security function as the team scales, collaborating with engineering, product and operations; the role is hybrid with four days onsite in London and one day remote, offering competitive benefits.

Qualifications

• Hands-on security engineering or DevSecOps with leadership.
• Strong vulnerability management and incident response background.
• Experience tuning scanning tooling in CI/CD; GitHub Actions and Terraform preferred.
• AI/LLM security exposure; OSCP, CISSP or GWAPT a plus.

Responsibilities

• Own security end-to-end: threat modelling, CVE remediation, tooling, pentest management and incident response.
• Secure the AI and LLM-powered product as the team scales.
• Collaborate with engineering to integrate security into development workflows.

Skills

Security engineering

DevSecOps leadership

Vulnerability management

Incident response

CI/CD security

GitHub Actions

Terraform

Penetration testing

Azure/GCP security

AI/LLM security

Tools

GitHub Actions

Terraform

Job description

An AI engineering team using machine learning and optimisation to automate the design of building systems, electrical, plumbing, mechanical, cutting waste, cost and CO2 in one of the world's most carbon-intensive industries.

Originally an independent startup, the team was acquired by a global engineering and infrastructure firm. Operating with startup speed and ownership, backed by enterprise capital.

The role

The team's first dedicated security hire, you'll own security end-to-end: threat modelling new products, CVE remediation, scanning tooling, penetration testing and incident response, plus securing the AI and LLM-powered product itself. A pivotal role, with scope to shape the security function as the team scales.

What you'll need

• Hands-on security engineering or DevSecOps experience with technical leadership.
• Strong vulnerability management and incident response background.
• Experience tuning scanning tooling in CI/CD (ideally GitHub Actions and Terraform), end-to-end pentest management, solid Azure and/or GCP security knowledge.
• AI/LLM security exposure and certifications like OSCP, CISSP or GWAPT are a plus.

London (4 days onsite, 1 remote)

Benefits:

• private medical, life insurance, critical illness cover, flexible salary sacrifice, pension.