Senior DevSecOps Engineer — Security Automation & AI

BBC UK; Greater London; Hybrid; GBP 70,000 - 80,000; Full time

Benefits offered by this job

London weighting

Flexible working

Job summary

BBC Senior Software Engineer, DevSecOps role within Media Technology-DevOps spans vulnerability management, platform ownership, and automation to bolster security across cloud services. The hands-on position emphasizes secure integrations, data flows, and scalable patterns while exploring AI-assisted capabilities to improve security analysis and workflows.

The role offers hybrid working with one day per week in the office and a London weighting.

Qualifications

• Hands-on experience operating and improving vulnerability-management, application-security or other security platforms used by engineering teams.
• Strong understanding of the vulnerability-management lifecycle, including prioritisation, ownership, risk treatment, resolution and reporting.
• Strong software engineering experience building and operating production services, integrations or automation using at least one modern programming language.
• Experience designing secure integrations and data flows across cloud environments using APIs, Infrastructure as Code, webhooks or event-driven patterns, with attention to IAM, least-privilege, secrets, failure handling and monitoring.
• Strong technical judgement and communication skills, with experience working across engineering teams to shape designs, explain trade-offs and deliver practical outcomes.

Responsibilities

• Operate and evolve security posture and vulnerability-management platforms, including configuration, access, integrations, data quality, risk policies and reporting.
• Own the technical implementation of vulnerability-management workflows, from prioritisation and assignment through to risk treatment, resolution and reporting.
• Monitor platform health and effectiveness, investigate data and integration issues, and work with suppliers for product support or changes.
• Design, build and operate integrations and automation that connect security findings with the context needed to act.
• Work with engineering teams to improve ownership, prioritisation and risk-management outcomes, turning successful approaches into reusable patterns.
• Maintain strong engineering standards through automated testing, observability, documentation, technical review and operational support.
• Evaluate, prototype and integrate AI-assisted capabilities where they can improve security analysis, prioritisation, remediation support or operational workflows.

Skills

Vulnerability management

Security platforms

Software engineering

APIs & IaC

IAM & least privilege

Cross-team comms

Job description

BBC Senior Software Engineer, DevSecOps role within Media Technology-DevOps spans vulnerability management, platform ownership, and automation to bolster security across cloud services. The hands-on position emphasizes secure integrations, data flows, and scalable patterns while exploring AI-assisted capabilities to improve security analysis and workflows.

The role offers hybrid working with one day per week in the office and a London weighting.