Senior Cybersecurity Lead Engineer- Hybrid DevSecOps & Cloud

Gazelle Global; Sheffield; Hybrid; GBP 90,000 - 120,000; Full time

Job summary

Gazelle Global in Sheffield is seeking a Senior Cybersecurity Lead Engineer to strengthen security across large-scale engineering platforms within a highly regulated financial environment. You will lead security initiatives, develop maturity frameworks and embed secure-by-design practices.

The role is hybrid in Sheffield for a 12-month contract, focusing on DevSecOps, threat modelling and cloud security. You will collaborate with platform owners and senior stakeholders to drive risk-informed

Qualifications

• Extensive cybersecurity experience in large-scale engineering platforms.
• Experience with cloud security across AWS, Azure or GCP and Kubernetes.
• Knowledge of cryptography, network/application security and vulnerability management.

Responsibilities

• Develop and maintain cybersecurity maturity frameworks for engineering platforms.
• Conduct security assessments across CI/CD, build systems, runtime infrastructure and developer tooling.
• Perform threat modelling, gap analysis and risk assessments.
• Define secure architecture patterns, security baselines and automated controls.
• Embed DevSecOps, vulnerability management, SBOM, provenance and code-signing practices.
• Build security roadmaps and remediate critical risks with platform owners.
• Advise senior stakeholders on technical risk and business impact.
• Track maturity improvements and drive secure-by-design practices.
• Provide strong leadership in a regulated environment.

Skills

Cybersecurity expertise

DevSecOps

Threat modelling

Security assessments

Stakeholder management

Tools

Kubernetes

AWS/Azure/GCP

CI/CD tooling

Job description

Gazelle Global in Sheffield is seeking a Senior Cybersecurity Lead Engineer to strengthen security across large-scale engineering platforms within a highly regulated financial environment. You will lead security initiatives, develop maturity frameworks and embed secure-by-design practices.

The role is hybrid in Sheffield for a 12-month contract, focusing on DevSecOps, threat modelling and cloud security. You will collaborate with platform owners and senior stakeholders to drive risk-informed