Senior Cloud Security & DevSecOps Consultant

Investigo; England; On-site; GBP 70,000 - 100,000; Full time

Job summary

Investigo is seeking a Senior Security Analyst / Consultant to join a security-focused team building secure products in a complex cloud environment across Azure and AWS. You will embed security with engineering teams, lead application security, and drive DevSecOps practices to ensure secure design and delivery.

You’ll run threat modelling sessions, translate technical risk for business stakeholders, and collaborate with testers to ensure ethical hacking, code reviews, and scans are properly

Qualifications

• Experience securing cloud environments (Azure/AWS).
• Knowledge of secure coding practices and CI/CD security checks.
• Ability to translate security risk into business terms.

Responsibilities

• Embed security in engineering teams before, during, and after development.
• Lead application security including secure coding and automated AppSec in CI/CD.
• Run threat modelling sessions with dev teams.
• Embed security controls early in lifecycle with DevSecOps practices.
• Promote proactive security over tool-driven tick-box checks.
• Provide end-to-end security assurance for cloud-based products (containers, APIs, apps, infra).
• Translate technical risk into language understandable to non-technical stakeholders.
• Collaborate with testers to ensure ethical hacking, reviews, and scans are performed properly.

Skills

Cloud security

DevSecOps

Application security

Threat modelling

Vulnerability management

Risk communication

Business alignment

Tools

SAST/DAST tooling

GitHub/Jenkins

IaC security tooling

Job description

Investigo is seeking a Senior Security Analyst / Consultant to join a security-focused team building secure products in a complex cloud environment across Azure and AWS. You will embed security with engineering teams, lead application security, and drive DevSecOps practices to ensure secure design and delivery.

You’ll run threat modelling sessions, translate technical risk for business stakeholders, and collaborate with testers to ensure ethical hacking, code reviews, and scans are properly