Senior DevSecOps Engineer — AI & Cloud Security

Artlist; Norwich; On-site; GBP 80,000 - 120,000; Full time

Job summary

Artlist is seeking a Senior DevSecOps Engineer to secure products, AI capabilities and infrastructure. The role spans product security, AI security and cybersecurity systems.

You will work with Product and R&D to embed security from the design stage, build practical safeguards and own security in production. You will lead threat modelling, integrate security into CI/CD, strengthen cloud protections across AWS, GCP and Azure, and own WAF and site protection.

Qualifications

• Four years’ experience in DevSecOps, application security or security engineering with ownership of production systems.
• Track record of embedding security into product design and development.
• Hands-on experience securing cloud environments (AWS/GCP/Azure).
• Practical knowledge of AI/LLM security, including access controls and data leakage protection.

Responsibilities

• Build security into product development: threat modelling and secure design reviews with Product and R&D from design stage.
• Embed security into engineering workflows: CI/CD pipelines, security testing, cloud protection, endpoint detection and testing.
• Define and implement access controls, data exposure safeguards and rate limiting with practical guardrails.
• Secure cloud infrastructure across AWS, GCP and Azure environments.
• Own WAF and site protection: rules, rate limiting, bot protection, DDoS mitigation.
• Lead detection and response: investigate incidents across endpoints, cloud and apps.
• Support security assurance: SOC 2 and ISO 27001 compliance activities.

Skills

Security design

Threat modelling

CI/CD security

Cloud security

WAF configuration

Scripting (Python/Go/Bash)

English communication

Tools

AWS

GCP

Azure

WAF

CI/CD tooling

Job description

Artlist is seeking a Senior DevSecOps Engineer to secure products, AI capabilities and infrastructure. The role spans product security, AI security and cybersecurity systems.

You will work with Product and R&D to embed security from the design stage, build practical safeguards and own security in production. You will lead threat modelling, integrate security into CI/CD, strengthen cloud protections across AWS, GCP and Azure, and own WAF and site protection.