Maritime DevSecOps Engineer — Secure SDLC & Azure

Ocean Infinity; City Of London; On-site; GBP 81,000 - 99,000; Full time

Job summary

Ocean Infinity is recruiting a DevSecOps Engineer to join the Cyber Security team. You will own the Secure Development Life Cycle, integrate security controls into pipelines, and collaborate with developers to accelerate secure software delivery for vessels and autonomy systems.

The role covers threat modelling, secrets management, AI/ML pipeline security, and secure cloud configurations in Microsoft Azure, with travel up to 25% for audits and assurance work.

Qualifications

• Secure SDLC ownership and implementation across pipelines.
• Experience with code analysis and dependency scanning.
• Familiar with Microsoft Azure and cloud security configurations.
• Threat modelling experience and remediation planning.
• Ability to communicate security guidance to engineers and leaders.
• Willingness to travel up to 25%.

Responsibilities

• Define and maintain Secure Development Life Cycle across Ocean Infinity software suites.
• Build security into development and release pipelines with automated code analysis and testing.
• Own secrets management and enforce no credentials-in-code policy.
• Perform threat modelling on new/changed systems and translate findings into fixes.
• Secure AI/ML development pipelines, including model provenance and data lineage.
• Support secure configuration of Azure-based build, deployment and cloud environments.
• Define and maintain software testing procedures and manage supplier firmware/software uploads.
• Produce software assurance evidence for certifications and audits.
• Own and run vulnerability disclosure program and coordinate with external auditors.

Skills

Secure SDLC

DevSecOps pipelines

Code analysis

Dependency scanning

Azure security

Threat modelling

Communication

Autonomous systems security

Travel availability

Education

Security certification (CSSLP/CISSP)

Azure security certification

Tools

Azure DevOps

SonarQube

Snyk

Job description

Ocean Infinity is recruiting a DevSecOps Engineer to join the Cyber Security team. You will own the Secure Development Life Cycle, integrate security controls into pipelines, and collaborate with developers to accelerate secure software delivery for vessels and autonomy systems.

The role covers threat modelling, secrets management, AI/ML pipeline security, and secure cloud configurations in Microsoft Azure, with travel up to 25% for audits and assurance work.