Senior DevSecOps Engineer - London

Hiya; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Hiya is seeking a DevSecOps Engineer to mature security across engineering, lead platform-based security tooling, and shape the security roadmap. You’ll collaborate with Core Tech, Product, and Engineering leadership to empower developers to ship securely without sacrificing velocity.

The role emphasizes hands-on execution, education, and a platform mindset, with responsibilities spanning CI/CD integrations, threat monitoring, and incident response.

Qualifications

• Deep understanding of cloud-native architecture (AWS) and modern security best practices.
• Proven experience designing self-service platforms that developers actually want to use.
• Strong communication skills to translate security concerns into actionable decisions.
• High proficiency in at least one modern programming language and familiarity with agent-based/AI-assisted development tools.

Responsibilities

• Define and execute a multi-quarter security roadmap for the entire engineering organization.
• Develop and maintain platform-level security tools enabling automated, self-service security for feature teams.
• Partner with Core Tech to integrate security primitives into CI/CD and cloud deployment workflows.
• Conduct cross-team discovery to assess security posture and identify high-risk technical debt.
• Mentor junior and peer engineers, fostering a culture where security is integrated into the build/run mindset.
• Stay ahead of evolving threat landscapes, including supply chain risks and AI infrastructure concerns.
• Own and mature detection, SIEM, and incident-response tooling as part of the broader security platform.

Skills

Cloud security

Self-service platforms

Security tooling

Communication skills

Platform mindset

Tools

AWS

CI/CD

SIEM

CloudFormation

Job description

About Hiya

At Hiya, we're making business calls more trusted, useful, and effective. Voice remains one of the most important ways businesses communicate with their customers, but the value of a call depends on trust. When customers do not recognize who is calling or why, important conversations are missed, customer relationships suffer, and business outcomes are harder to achieve. Hiya helps businesses create trusted calling experiences that benefit both sides of the conversation: enterprises can reach customers with confidence, and customers can answer with confidence. Our products support branded business calling, trusted caller identity, call performance insights, customer engagement, and voice security capabilities that help businesses strengthen relationships and improve outcomes. This role sits in a core business area for Hiya and is focused on helping SMB and enterprise customers succeed.

About the Position

The DevSecOps Engineer is a leadership and individual contributor role responsible for maturing our security posture across all engineering departments. You will lead the design and implementation of automated, platform-based security solutions, enabling teams to build secure software while maintaining velocity. You will partner closely with Core Tech, Product, and Engineering leadership to define our security roadmap and culture. We're excited about you because you are a trailblazer who balances high-level strategy with hands-on technical execution. You are comfortable building from near-scratch, thrive on educating others, and possess a "platform" mindset that prioritizes empowering developers over acting as a gatekeeper.

What You'll Do

• Define and execute a multi-quarter security roadmap for the entire engineering organization.
• Develop and maintain platform-level security tools that enable automated, self-service security for feature teams.
• Partner with Core Tech to integrate security primitives into our standard CI/CD and cloud deployment workflows.
• Conduct cross-team discovery to assess current security posture and identify high-risk technical debt.
• Mentor junior and peer engineers, fostering a culture where security is integrated into the "you build it, you run it" philosophy.
• Stay ahead of evolving threat landscapes, specifically regarding supply chain risks and large-scale AI infrastructure.
• Own and mature our existing detection, SIEM, and incident-response tooling as part of building out the broader security platform - this role inherits live systems, it isn't a blank canvas.
• Act as a security collaborator to IT on AI-usage risk (data exposure via connectors/agents, prompt injection) - distinct from, and in addition to, securing the AI systems Hiya builds as a product.

Qualities that will make you successful:

• Deep understanding of cloud-native architecture (AWS) and modern security best practices.
• Proven experience designing "self-service" platforms that developers actually want to use.
• Strong communication skills-the ability to turn complex security concerns into decisions engineers and stakeholders can act on.
• High proficiency in at least one modern language and familiarity with agent-based/AI-assisted development tools.
• Pragmatism-knowing when to accept calculated tech debt in favor of high-impact outcomes.
• A leadership style rooted in empathy, collaborative debate, and commitment to team decisions.
• Builds systems, documentation, and team capability that outlast you - we're wary of highly productive engineers who leave behind bespoke, unmaintainable tooling that has to be scrapped when they move on.

The person in this role must embody Hiya's key values of Serving our customers, Doing rather than observing, Improving ourselves and our business, Owning and holding ourselves accountable for success, and Leading by showing up with a point of view, engaging in open discussion, listening respectfully to others opinions and committing to decisions.

The requirements listed in the job descriptions are guidelines. You don't have to satisfy every requirement or meet every qualification listed. If your skills are transferable we would still love to hear from you.

How We Work

Hiya is not a passive environment. We expect people to take ownership, form opinions, and engage directly with hard problems. We work with a high degree of transparency and autonomy. Context is shared openly, and decisions are discussed, challenged, and then made. Once a call is made, we commit and move forward. You'll be expected to work through ambiguity, weigh tradeoffs, and take responsibility for results, while keeping a high bar for quality and customer trust.

Every team member at Hiya is expected to live our core values: Serve, our customers and partners by holding a high bar for trust and quality Own, share in success and open up to failures Lead, show up with a point of view but commit entirely once a decision has been made