Lead Security Engineer (Scrum) – Cloud, DevSecOps & Risk

PHET Enterprise Services (AP) Limited, Philippines Regional Operating Headquarters; England; On-site; GBP 70,000 - 110,000; Full time

Job summary

DXC Technology in Hampshire is seeking a Security Engineer (Scrum) to lead security architecture and DevSecOps integration across cloud and hybrid environments. The role requires 7+ years in cybersecurity and UK residency eligibility.

The successful candidate will collaborate with MOD accreditors and risk owners, provide technical guidance, and ensure compliance with national security standards while remaining hands-on with secure coding practices.

Qualifications

• 7+ years in cybersecurity and secure systems architecture.
• Education: Cyber or IT NVQ Level 4 or higher, or degree in Information Security/CS.
• Mandatory senior security certifications (e.g., CISSP or CISM) and cloud security knowledge.

Responsibilities

• Security Architecture: design and implement robust security controls across cloud and hybrid infrastructures.
• DevSecOps Integration: embed automated security scanning (SAST/DAST/SCA) into delivery pipelines.
• Risk & Governance: work with MOD accreditors, Risk Owners, and project leadership on security cases and risk management.
• Technical Guidance: provide hands-on direction on remediation, secure coding, and incident response preparedness.

Skills

Secure networking

IAM

Zero-trust

Cloud security

IaC security

Vulnerability management

Education

NVQ Level 4 or higher in Cyber/IT

Degree in Information Security or Computer Science

Tools

SAST

DAST

SCA

Container security

Job description

DXC Technology in Hampshire is seeking a Security Engineer (Scrum) to lead security architecture and DevSecOps integration across cloud and hybrid environments. The role requires 7+ years in cybersecurity and UK residency eligibility.

The successful candidate will collaborate with MOD accreditors and risk owners, provide technical guidance, and ensure compliance with national security standards while remaining hands-on with secure coding practices.