Senior DevSecOps Engineer - AI & Cloud Security Lead

Art List; Norwich; On-site; GBP 90,000 - 140,000; Full time

Job summary

Artlist is seeking a Senior DevSecOps Engineer to shape how we secure products, AI capabilities and infrastructure. You’ll own security in production, embedding safeguards from design to deployment and working with Product and R&D to raise security standards.

In this hands-on role you will integrate security tooling into CI/CD, protect cloud environments (AWS, GCP, Azure), manage WAF and site protection, and support SOC 2 / ISO27001 compliance. Fluent English required.

Qualifications

• Proven experience in DevSecOps, security engineering or application security with ownership of production systems.
• Hands-on experience securing cloud environments (AWS, GCP or Azure).
• Knowledge of AI and LLM security, including model access controls and data leakage prevention.
• Experience with WAF configuration and site protection.
• Scripting and automation skills in Python, Go or Bash.
• Fluent English and ability to communicate security requirements clearly across teams.

Responsibilities

• Build security into product development via threat modelling and secure design reviews.
• Embed security tooling and controls into CI/CD pipelines, products and infrastructure, including security testing and cloud protection.
• Define and implement controls for access, data exposure, injections and rate limiting.
• Secure cloud infrastructure across AWS, GCP and Azure environments.
• Own WAF and site protection: rules, rate limiting and bot protection.
• Lead detection and response across endpoints, cloud infrastructure and applications.
• Support security assurance and compliance activities (SOC 2, ISO 27001).

Skills

Security engineering

DevSecOps

Cloud security

Automation scripting

Collaboratio n

Tools

AWS

GCP

Azure

WAF

CI/CD

Python

Go

Bash

Job description

Artlist is seeking a Senior DevSecOps Engineer to shape how we secure products, AI capabilities and infrastructure. You’ll own security in production, embedding safeguards from design to deployment and working with Product and R&D to raise security standards.

In this hands-on role you will integrate security tooling into CI/CD, protect cloud environments (AWS, GCP, Azure), manage WAF and site protection, and support SOC 2 / ISO27001 compliance. Fluent English required.