DevSecOps Consultant (Cybersecurity)
ΠΡΡΡ & Π‘ΠΎΠΏΡΠΎΠ²ΠΎΠ΄
ΠΠ»Ρ ΠΌΡΡΡΠ° Ρ ΡΡΠΎΠΉ Π²Π°ΠΊΠ°Π½ΡΠΈΠ΅ΠΉ Π½ΡΠΆΠ΅Π½ Plus
ΠΠΏΠΈΡΠ°Π½ΠΈΠ΅ Π²Π°ΠΊΠ°Π½ΡΠΈΠΈ
TL;DR
DevSecOps Consultant (Cybersecurity): Embedding application security across the SDLC to design and operate software security controls with an accent on security automation and vulnerability triage. Focus on implementing SAST/SCA tooling, developing custom automation for technical controls, and leading application-level incident response.
Location: Hybrid working (London, UK)
Company
is a leading media and telecommunications company providing broadband, broadcast, streaming, and mobile services.
What you will do
- Own the end-to-end onboarding of approved software security tooling into the SDLC across design, development, and deployment phases.
- Act as a technical advisor to product and platform teams, providing guidance on secure design and implementation.
- Develop custom automation tools to verify technical controls, including metric reporting and PR scanning.
- Conduct code reviews, dependency risk analysis, and vulnerability triage across the technology landscape.
- Lead application-level security incident response, focusing on investigation, containment, and root cause analysis.
- Collaborate with Threat Intelligence and Threat Modelling functions to ensure risks are identified and addressed.
Requirements
- Technical degree in Computer Science, Software Engineering, or a related security field.
- Strong understanding of SDLC and application security principles, including OWASP Top 10.
- Hands-on experience with Java, JavaScript, or Python in a production/enterprise environment.
- Practical experience integrating and configuring SAST, SCA, and secrets scanning tools.
- Good understanding of cloud-native architectures, APIs, and CI/CD pipelines.
- Must be based in the UK to support hybrid working at the London offices (Osterley or Brick Lane).
Nice to have
- Experience supporting security incident response or root cause analysis at the application level.
Culture & Benefits
- Hybrid working model splitting time between home and modern office spaces.
- Exclusive rates for Q and Glass.
- Generous pension package and private healthcare.
- Discounted mobile and broadband services.
- Access to extensive campus facilities including a gym, cinema, and subsidised restaurants.
ΠΡΠ΄ΡΡΠ΅ ΠΎΡΡΠΎΡΠΎΠΆΠ½Ρ: Π΅ΡΠ»ΠΈ ΡΠ°Π±ΠΎΡΠΎΠ΄Π°ΡΠ΅Π»Ρ ΠΏΡΠΎΡΠΈΡ Π²ΠΎΠΉΡΠΈ Π² ΠΈΡ ΡΠΈΡΡΠ΅ΠΌΡ, ΠΈΡΠΏΠΎΠ»ΡΠ·ΡΡ iCloud/Google, ΠΏΡΠΈΡΠ»Π°ΡΡ ΠΊΠΎΠ΄/ΠΏΠ°ΡΠΎΠ»Ρ, Π·Π°ΠΏΡΡΡΠΈΡΡ ΠΊΠΎΠ΄/ΠΠ, Π½Π΅ Π΄Π΅Π»Π°ΠΉΡΠ΅ ΡΡΠΎΠ³ΠΎ - ΡΡΠΎ ΠΌΠΎΡΠ΅Π½Π½ΠΈΠΊΠΈ. ΠΠ±ΡΠ·Π°ΡΠ΅Π»ΡΠ½ΠΎ ΠΆΠΌΠΈΡΠ΅ "ΠΠΎΠΆΠ°Π»ΠΎΠ²Π°ΡΡΡΡ" ΠΈΠ»ΠΈ ΠΏΠΈΡΠΈΡΠ΅ Π² ΠΏΠΎΠ΄Π΄Π΅ΡΠΆΠΊΡ. ΠΠΎΠ΄ΡΠΎΠ±Π½Π΅Π΅ Π² Π³Π°ΠΉΠ΄Π΅ β