Senior DevSecOps Architect & SDLC Security Lead (Hybrid)

RiverSafe; Greater London; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

RiverSafe is expanding its security practice and seeking a Senior DevSecOps Consultant to embed security into the development lifecycle across large-scale programs. The role combines hands-on DevSecOps with security architecture, design assurance, and stakeholder engagement, guiding multiple delivery teams.

The ideal candidate will have strong DevSecOps experience, expertise across CI/CD security, and a proven ability to engage with technical staff and senior stakeholders.

Qualifications

• Experience in DevSecOps, security architecture and design assurance.
• Knowledge of secure software development practices and security-by-design principles.
• Experience with security tooling (SAST, DAST, SCA, container security).
• Experience with CI/CD tooling such as GitHub, GitLab, Azure DevOps, Jenkins, Terraform, Kubernetes, Docker.
• Ability to engage with technical teams, architects and senior stakeholders.

Responsibilities

• Embed security throughout the SDLC in collaboration with development and platform teams.
• Provide DevSecOps guidance across multiple agile delivery pods.
• Review designs and architectures for security requirements.
• Conduct threat modelling, risk assessments and security design reviews.
• Support governance activities and provide recommendations to senior cyber security stakeholders.

Skills

DevSecOps

CI/CD security

Secure SDLC

GitHub

GitLab

Azure DevOps

Jenkins

Terraform

Kubernetes

Docker

Cloud platforms

SAST/DAST/SCA

Secrets management

Vulnerability management

Stakeholder engagement

Education

Bachelor's degree or equivalent

Job description

RiverSafe is expanding its security practice and seeking a Senior DevSecOps Consultant to embed security into the development lifecycle across large-scale programs. The role combines hands-on DevSecOps with security architecture, design assurance, and stakeholder engagement, guiding multiple delivery teams.

The ideal candidate will have strong DevSecOps experience, expertise across CI/CD security, and a proven ability to engage with technical staff and senior stakeholders.