Overview
The role of the Lead DevSecOps Engineer involves joining a tech consultancy to engage with a private financial services client on a hybrid basis. This hands-on position focuses on integrating security throughout the development lifecycle, emphasizing coding and engineering practices rather than traditional infrastructure support. You will collaborate with various engineering teams to build security patterns, lead vulnerability assessments, and ensure compliance while fostering trust within your team and with leadership.
Responsibilities
- Define and drive a security engineering roadmap within the platform team.
- Integrate security into CI/CD pipelines and Infrastructure as Code (IaC).
- Build repeatable security patterns and lead technical vulnerability triage.
- Consult with feature teams on Data Privacy Impact Assessments (DPIAs).
- Influence stakeholders at all levels through technical expertise and credibility.
- Implement security frameworks such as NIST CSF and CSA Critical Controls in practical applications.
- Foster a zero-trust architecture across various deployment models.
- Collaborate with incident response and SOC teams as needed.
Requirements
- Proven experience in platform or cloud security engineering and DevSecOps.
- Hands-on expertise with AWS security, ideally in hybrid-cloud and SaaS environments.
- Strong skills in CI/CD and IaC security integration.
- Proficient in coding, particularly with Python or equivalent.
- Experience with technical vulnerability triage and remediation strategies.
- Familiarity with security frameworks like NIST CSF or CSA Critical Controls.
- Ability to lead DPIA consultations and embed compliance in engineering practices.
- Knowledge of zero-trust architecture principles in diverse deployment models.