Senior DevSecOps Engineer

Hiya; Greater London; Teletrabalho; GBP 80 000 - 100 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Stock Options

100% Covered Medical

401K Program

Paid Parental Leave

Commuter Benefits

Resumo da oferta

Hiya is seeking a DevSecOps Engineer to lead and enhance our security practices. This role combines leadership with implementation responsibilities, focusing on building secure software while promoting a company-wide culture of security.

You will execute a multi-quarter security roadmap and develop tools that empower feature teams with automated security solutions. Join us to make a significant impact in securing our engineering processes through collaboration and mentoring.

Qualificações

• Experience with security posture management across engineering.
• Ability to lead the design of platform-based security solutions.
• Proficiency in cloud-native architecture, specifically AWS.

Responsabilidades

• Define and execute a multi-quarter security roadmap.
• Develop platform-level security tools for feature teams.
• Mentor junior engineers to foster a culture of integrated security.

Conhecimentos

Leadership in security

Automated security solutions

Mentoring engineers

Cloud-native architecture

Communication skills

Ferramentas

CI/CD workflows

SIEM tools

AI development tools

Descrição da oferta de emprego

• The DevSecOps Engineer is a leadership and individual contributor role responsible for maturing our security posture across all engineering departments
• You will lead the design and implementation of automated, platform-based security solutions, enabling teams to build secure software while maintaining velocity
• You will partner closely with Core Tech, Product, and Engineering leadership to define our security roadmap and culture
• We’re excited about you because you are a trailblazer who balances high-level strategy with hands-on technical execution
• You are comfortable building from near-scratch, thrive on educating others, and possess a “platform” mindset that prioritizes empowering developers over acting as a gatekeeper
• Define and execute a multi-quarter security roadmap for the entire engineering organization
• Develop and maintain platform-level security tools that enable automated, self-service security for feature teams
• Partner with Core Tech to integrate security primitives into our standard CI/CD and cloud deployment workflows
• Conduct cross-team discovery to assess current security posture and identify high-risk technical debt
• Mentor junior and peer engineers, fostering a culture where security is integrated into the “you build it, you run it” philosophy
• Stay ahead of evolving threat landscapes, specifically regarding supply chain risks and large-scale AI infrastructure
• Own and mature our existing detection, SIEM, and incident-response tooling as part of building out the broader security platform — this role inherits live systems, it isn’t a blank canvas
• Act as a security collaborator to IT on AI-usage risk (data exposure via connectors/agents, prompt injection) — distinct from, and in addition to, securing the AI systems Hiya builds as a product
• The person in this role must embody Hiya’s key values of Serving our customers, Doing rather than observing, Improving ourselves and our business, Owning and holding ourselves accountable for success, and Leading by showing up with a point of view, engaging in open discussion, listening respectfully to others opinions and committing to decisions

Benefits

• Stock Options
• 100% Covered Medical, Dental and Vision
• 401K Program
• Vacation Package
• Paid Parental Leave
• Commuter Benefits
• Employer Covered Long-term Disability and Life Insurance
• Employee Learning and Development Budget
• Charitable Matching

A leadership style rooted in empathy, collaborative debate, and commitment to team decisionsPragmatism—knowing when to accept calculated tech debt in favor of high-impact outcomesHigh proficiency in at least one modern language and familiarity with agent-based/AI-assisted development toolsStrong communication skills—the ability to turn complex security concerns into decisions engineers and stakeholders can act onBuilds systems, documentation, and team capability that outlast you — we’re wary of highly productive engineers who leave behind bespoke, unmaintainable tooling that has to be scrapped when they move onProven experience designing “self-service” platforms that developers actually want to useDeep understanding of cloud-native architecture (AWS) and modern security best practices

The requirements listed in the job descriptions are guidelines. You don’t have to satisfy every requirement or meet every qualification listed. If your skills are transferable we would still love to hear from you