Secure SDLC Architect & DevSecOps Specialist

Barclay Simpson; Greater London; Ibrido; GBP 80.000 - 110.000; Tempo pieno

Descrizione del lavoro

Barclay Simpson is seeking a Technical Security Consultant to support the development and continuous improvement of a Secure SDLC capability. This role blends secure software development lifecycle practices with DevSecOps, application security and architecture expertise to assess control effectiveness across modern engineering environments.

You will review security tooling, map controls to frameworks such as NIST SSDF and OWASP DSOMM, conduct control assessments and facilitate engineering

Competenze

• Strong Secure SDLC, DevSecOps or Application Security experience.
• Good understanding of security controls throughout the software development lifecycle.
• Experience with security assurance, control frameworks, architecture or capability mapping.

Mansioni

• Assess Secure SDLC controls across design, development, testing, release and operation.
• Review security architecture, tooling coverage, integration dependencies and control gaps.
• Assess capabilities including SAST, SCA, DAST, secrets scanning, IaC scanning, API security, threat modelling and CI/CD security.
• Map controls against frameworks including NIST SSDF, OWASP SAMM and OWASP DSOMM.
• Review security tooling and integrations across GitHub, GitLab, CI/CD and cloud environments.
• Conduct control-effectiveness assessments, evidence reviews and maturity/gap analysis.
• Facilitate workshops with engineering, security and product teams.
• Support KPI/KRI development, assurance reporting and remediation oversight.

Conoscenze

Secure SDLC

DevSecOps

Application Security

Stakeholder management

Strumenti

GitHub Advanced Security

CodeQL

Dependabot

Fortify

Qualys

Checkov

Descrizione del lavoro

Barclay Simpson is seeking a Technical Security Consultant to support the development and continuous improvement of a Secure SDLC capability. This role blends secure software development lifecycle practices with DevSecOps, application security and architecture expertise to assess control effectiveness across modern engineering environments.

You will review security tooling, map controls to frameworks such as NIST SSDF and OWASP DSOMM, conduct control assessments and facilitate engineering