Назад
Company hidden
обновлено 3 дня назад

DevSec Engineer (Cybersecurity)

Тип работы
fulltime
Грейд
middle/senior
Английский
b2
Страна
UK
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
DevSec Engineer (Cybersecurity): Building secure application and platform security controls across CI/CD systems with an accent on application security, container security, and secure software supply chains. Focus on integrating SAST, DAST, SCA, secrets detection, and dependency scanning, while designing auditable controls and supporting developers with vulnerability remediation.

Location: North London, UK

Company

hirify.global is part of Super Group, a NYSE-listed digital gaming company operating sports and iGaming brands across 22 countries.

What you will do

  • Integrate and operate application security controls in CI/CD pipelines, including SAST, DAST, SCA, secrets detection, and dependency risk scanning.
  • Support secure SDLC practices through branch protection, quality gates, secure build and release controls, and artifact integrity checks.
  • Assist with threat modelling, secure design reviews, vulnerability triage, remediation, and application-related security incident investigations.
  • Configure and maintain security tooling integrations across GitHub Actions, GitLab CI, Jenkins, and Azure DevOps.
  • Define DevSec security standards, patterns, control mappings, and audit evidence while tracking technical debt and security risks.
  • Collaborate with engineering teams on security enablement, awareness, cloud-native security, and container security practices.

Requirements

  • Strong grounding in application security, secure coding, OWASP Top 10, API security, and dependency risk.
  • Strong knowledge of SAST, DAST, SCA, and software supply-chain security concepts.
  • Hands-on experience with Docker, Kubernetes, and container security across build, registry, and runtime environments.
  • Proven experience securing CI/CD pipelines and developer toolchains.
  • Knowledge of Infrastructure as Code, including Terraform, Bicep, or CloudFormation, as well as secrets management and cloud IAM.
  • Understanding of information security frameworks such as ISO 27001 and experience in regulated or audited environments.

Nice to have

  • Knowledge of sports betting markets, odds calculation, betting types, and market trends.
  • Experience in online gaming or casino environments and familiarity with gambling regulations.
  • Experience with customer retention strategies or multinational, multi-team environments.
  • Previous involvement in audits, regulatory reviews, or formal assurance activities.

Culture & Benefits

  • Learning and development programmes with training and career growth opportunities.
  • Performance feedback through the company’s Performance tool.
  • Employee Assistance Programme with resources for employees and their families.
  • Culture emphasizing adaptability, ownership, resilience, teamwork, integrity, and innovation.

Hiring process

  • Applications typically take around five minutes to complete.
  • If no response is received within two weeks, the application should be considered unsuccessful.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →