Senior DevSecOps Consultant - Hybrid - Permanent

RiverSafe; Greater London; Híbrido; GBP 90 000 - 130 000; Tempo integral

Resumo da oferta

RiverSafe is expanding its security practice and seeking a Senior DevSecOps Consultant to embed security into the development lifecycle across large-scale programs. The role combines hands-on DevSecOps with security architecture, design assurance, and stakeholder engagement, guiding multiple delivery teams.

The ideal candidate will have strong DevSecOps experience, expertise across CI/CD security, and a proven ability to engage with technical staff and senior stakeholders.

Qualificações

• Experience in DevSecOps, security architecture and design assurance.
• Knowledge of secure software development practices and security-by-design principles.
• Experience with security tooling (SAST, DAST, SCA, container security).
• Experience with CI/CD tooling such as GitHub, GitLab, Azure DevOps, Jenkins, Terraform, Kubernetes, Docker.
• Ability to engage with technical teams, architects and senior stakeholders.

Responsabilidades

• Embed security throughout the SDLC in collaboration with development and platform teams.
• Provide DevSecOps guidance across multiple agile delivery pods.
• Review designs and architectures for security requirements.
• Conduct threat modelling, risk assessments and security design reviews.
• Support governance activities and provide recommendations to senior cyber security stakeholders.

Conhecimentos

DevSecOps

CI/CD security

Secure SDLC

GitHub

GitLab

Azure DevOps

Jenkins

Terraform

Kubernetes

Docker

Cloud platforms

SAST/DAST/SCA

Secrets management

Vulnerability management

Stakeholder engagement

Formação académica

Bachelor's degree or equivalent

Descrição da oferta de emprego

We're looking for a Senior DevSecOps Consultant to join a growing security practice supporting large scale enterprise clients. This role combines hands on DevSecOps expertise with security architecture, design assurance, and stakeholder engagement, helping organisations embed security into their development lifecycle while providing oversight across multiple delivery teams.

** This role requires 2-3 days on site at our Canary Wharf office, or on client sites.

Responsibilities

• Partner with development and platform teams to embed security throughout the SDLC.
• Provide DevSecOps guidance and oversight across multiple agile delivery pods.
• Review solution designs and architectures to ensure security requirements are met.
• Conduct threat modelling, risk assessments, and security design reviews.
• Support security governance activities and provide recommendations to senior cyber security stakeholders and CISO functions.

Skills

• Strong experience in DevSecOps, DevOps, Application Security, or Cloud Security roles.
• Experience implementing security controls within CI/CD pipelines.
• Knowledge of secure software development practices and security-by-design principles.
• Experience with technologies such as GitHub, GitLab, Azure DevOps, Jenkins, Terraform, Kubernetes, Docker, and cloud platforms (Azure, AWS, or GCP).
• Familiarity with security tooling including SAST, DAST, SCA, container security, secrets management, and vulnerability management solutions.
• Ability to engage confidently with technical teams, architects, and senior business stakeholders.