Senior DevSecOps Engineer (AI Security)

Location: Remote within the United Kingdom

Salary: £75,000–£85,000 per year

Company

hirify.global develops MIS and school management tools used by more than 12,000 schools and trusts to improve staff workflows, data use, and working life in education.

What you will do

• Identify and implement security improvements across platform architecture, infrastructure, and system components.
• Threat-model existing and new systems, including AI/LLM features and agentic workflows, and turn findings into prioritised work.
• Strengthen software supply-chain security through dependency and base-image hygiene, SBOMs, artefact signing, provenance, and pinned actions and packages.
• Secure AI-assisted development tooling, assistants, and MCP integrations through scoped permissions, sandboxing, logging, and audit controls.
• Contribute to secure, stable, and efficient deployment frameworks, secrets management, incident response, and blameless post-mortems.
• Maintain playbooks, runbooks, and systems documentation while supporting knowledge sharing through technical talks and team learning.

Requirements

• Extensive experience in cyber security and related engineering practices, including vulnerability management and remediation at scale.
• Proven DevOps or DevSecOps engineering experience within large-scale platforms.
• Proficiency with distributed cloud systems, particularly Amazon Web Services.
• Expertise with Infrastructure as Code tools such as Terraform and CloudFormation.
• Experience with PHP, Bash, or Python; Docker and containerisation; and container and runtime security.
• Experience with software supply-chain security, including SBOMs, dependency scanning, artefact signing, and provenance such as SLSA or Sigstore.
• Experience with secrets management and detection, SDLC security tooling including SAST, DAST, SCA, IaC and container scanning, and policy-as-code or guardrails such as OPA or Conftest.
• Identity-centric or zero-trust access practices and familiarity with monitoring and detection tools such as DataDog or Prometheus.
• Practical understanding of AI/LLM security risks, AI threat modelling, adversarial techniques, AI-aware red teaming, and secure AI-assisted or agentic development tooling.
• Awareness of AI governance and assurance frameworks such as NIST AI RMF and ISO/IEC 42001, including their relationship to data-protection obligations for a multi-tenant platform handling children's data.
• Exceptional written and spoken English, proactive problem-solving ability, teamwork, and communication skills.

Nice to have

• Experience with enterprise solutions running at scale.
• Familiarity with kanban, agile development, and software practices such as Refactoring, Clean Code, Domain-Driven Design, and Test-Driven Development.
• Experience with EdTech compliance frameworks such as NIST CSF, ISO 27001, SOC 2, or UK GDPR.
• Relevant certifications such as AWS Security Specialty, OSCP, or AI security and governance credentials.

Culture & Benefits

• Flexible working with a wellbeing programme, mental health support, counselling, and a 24/7 virtual GP service.
• 32 days of holiday plus Bank Holidays, including company-wide days.
• Life Assurance at 3x annual salary, private dental insurance, and a salary sacrifice pension.
• Enhanced maternity, adoption, and paternity leave, plus return-to-work maternity coaching.
• Professional development budget, financial wellbeing services, charity volunteering day, and team and company events.
• Visa sponsorship is not available at this time.

Hiring process

• Phone screen followed by first-stage and second-stage interviews.
• Reasonable adjustments are available during the application or interview process on request.