46 jobs found

We are looking for a DevSecOps Engineer who can secure AI-generated code - specifically code produced by Claude Code. Location: Sheffield (2 days per week onsite) Core of the role: Embed security into developer workflows around Claude Code Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code Deploy secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repos Define secure code review gates for AI-assisted development Instrument Claude Code usage for security telemetry - SIEM Support incident response for code-related security events Act as a developer-facing security champion Must-haves: 5+ years DevSecOps/AppSec Strong CI/CD: GitHub Actions, GitLab CI, Jenkins SAST, DAST, secrets scanning tooling OWASP Top 10, secure coding Scripting: Python, Bash, etc. Nice-to-haves: Familiarity with AI code-gen tools and their security implications Supply chain security (SBOM, SLSA) CSSLP or equivalent cert The twist: This isn't a generic DevSecOps role - the differentiator is securing AI-generated code and building guardrails around Claude Code usage. If your CV shows standard pipeline security but nothing about AI code generation, LLM outputs, or securing AI-assisted dev workflows,

Job title: Lead DevSecOps Engineering Lead (MOD / MODCloud) Rate: 645 per day inside ir35 Location: Remote Contract 6 months+ Active SC security clearance is required for this role We're looking for a Lead DevSecOps Engineer to take a key role on a major UK MOD digital transformation programme, working with a leading technology partner delivering secure digital products into the Defence environment. This is a genuinely high-impact MODCloud role, spanning multiple cloud estates and products across the MOD digital landscape, you'll help engineer and govern will be deployed across the MOD digital estate (MODCloud), including: Microsoft Azure - MODCloud ACE / i-ACE AWS - MODCloud ICE Oracle Cloud Infrastructure - OCI / MODCloud OCE You'll help establish consistent, secure and automated DevSecOps practices across multiple products and engineering teams, embedding security, compliance and automation throughout the software delivery lifecycle. Responsibilities: Lead and embed DevSecOps engineering practices across multiple MOD digital products Design and govern secure CI/CD and GitOps pipelines Integrate security scanning, vulnerability management and compliance controls Drive Infrastructure as Code using Terraform Work across Kubernetes / Docker / AWS EKS Implement secrets, identity and access management using technologies such as HashiCorp Vault Establish observability, monitoring, logging and audit controls Develop secure-by-design engineering practices aligned to MOD security requirements Coordinate DevSecOps engineers, developers, testers and infrastructure teams Create and maintain security processes, technical standards and operational runbooks Support incident response, patching, risk management and compliance activity Expereince required: You'll need strong hands-on experience across: AWS Kubernetes/EKS Terraform GitHub Actions GitOps Argo CD Docker Vault Trivy cert-manager Grafana Loki Python Bash You'll also need: Proven DevSecOps leadership experience UK Government / GDS delivery experience Strong stakeholder and communication skills Experience working across distributed engineering teams If you're an SC-cleared DevSecOps Lead who wants to work on genuinely mission-critical MOD technology, please feel free to submit your CV

Senior DevSecOps Engineer UK Wide 2 days per month in a chosen UK office Permanent Up to £95,000 + benefits We're recruiting for a Senior DevSecOps Engineer to join a large-scale technology and data environment delivering secure platforms for complex public-sector programmes. This is a hands-on engineering role with a strong focus on DevSecOps, Kubernetes, CI/CD, automation and secure platform delivery. You'll be working on technically interesting environments where reliability, security and repeatable deployment really matter. The role sits close to data and AI teams, so there is also exposure to MLOps, machine-learning workloads and modern data platforms, but the core requirement is strong DevSecOps / platform engineering capability. What you'll be doing Designing and delivering secure CI/CD pipelines across complex environments Building and supporting Kubernetes/container platforms Embedding security controls into engineering workflows Automating infrastructure and deployment processes using Python, Bash, YAML and IaC tooling Supporting secure deployment into restricted or highly controlled environments Working closely with engineering, data and AI teams to improve platform reliability and deployment standards Contributing to MLOps and ML deployment patterns where required Providing technical direction across DevSecOps, automation and platform architecture What we're looking for Strong background in DevSecOps, DevOps or Platform Engineering Hands-on experience with Kubernetes and Docker Strong CI/CD experience, ideally GitLab Good scripting capability in Python and/or Bash Strong Linux knowledge Experience with cloud and infrastructure automation Exposure to secure, regulated, government, defence or public-sector environments would be highly beneficial Experience with MLOps, ML infrastructure or supporting data science teams would also be useful The hiring team has been clear that they are not expecting somebody to tick every box. The priority is finding someone with genuine depth in DevSecOps and Kubernetes, rather than a CV containing a long list of technologies with limited hands-on experience. Security clearance Candidates must be eligible to obtain SC clearance, including the required UK residency criteria. Location This is a UK-wide opportunity with hybrid working. There will be a mix of home working, office-based work and occasional client-site requirements depending on the project. Salary: Up to £95,000, with some flexibility for particularly strong candidates. If you're a DevSecOps or Platform Engineer who enjoys working on secure, technically complex environments and wants exposure to data, AI and MLOps, get in touch for more information.

Description At , we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success. Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots of close interaction with the infrastructure, security engineering, cross-cutting and compliance teams. We are looking for an experienced Senior level GCP Security Engineer to join our established Security Engineering team, working closely with Information Security, Infrastructure and the various Engine Technology teams to make sure security is at the heart of all our technical processes. As our subject matter expert, you will take ownership of engineering the security foundations of our Google Cloud Platform environment. This is a hands-on role for a specialist with a proven track record of designing, building, and automating security controls specifically for GCP, including hardened GKE clusters. Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech. As a GCP Security Engineer, you will: Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture) Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams Requirements We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you have an innate passion for security and care enough to find elegant solutions to difficult problems, we'd love to hear from you. What skills are essential: Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls A deep understanding of GCP IAM and its limitations Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL) Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability to document security requirements from various stakeholders Excellent problem-solving, communication and active listening skills with an innate passion for security The ability to identify security gaps and create solutions to minimise risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing and switching concepts (TCP/IP, BGP, VPNs), security controls (firewalls, WAFs, IDS/IPS), and practical experience designing hybrid connectivity between GCP and on-premise environments Experience with data-residency and regulated-workload controls such as Assured Workloads and Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS / 3DS Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes, and an understanding of integrating security into the software development lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST / DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great! Java, which makes up the majority of our backend codebase GCP and AWS - we're cloud-native Microservice-based architecture Kubernetes (GKE on GCP, EKS on AWS) TeamCity for CI/CD (with multiple production releases per day) Terraform and Grafana RDS and CloudSQL for PostgreSQL Our Interview Process: Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: Initial interview with an Engineer - 45 minutes Take-home technical test, to be discussed in the next interview Technical interview with some Engineers - 1 . click apply for full job details

Description At , we are on a mission to find and work with leading banks all around the world who have the ambition to build rapid growth businesses, on our technology. Engine is Starling's software-as-a-service (SaaS) business, the technology that was built to power Starling Bank, and a year ago we split out as a separate business. has seen exceptional growth and success, and a large part of that is down to the fact that we have built our own modern technology from the ground up. The Engine technology platform is now available to banks and financial institutions all around the world, enabling them to benefit from the innovative digital features, and efficient back-office processes that has helped achieve Starling's success. Our technologists are at the very heart of Engine and enjoy working in a fast-paced environment that is all about building things, creating new stuff, and disruptive technology that keeps us on the cutting edge of fintech. We operate a flat structure to empower you to make decisions regardless of what your primary responsibilities may be, innovation and collaboration will be at the core of everything you do. Help is never far away in our open culture, you will find support in your team and from across the business, we are in this together! The way to thrive and shine within Engine is to be a self-driven individual and be able to take full ownership of everything around you: From building things, designing, and discovering to sharing knowledge with your colleagues and making sure all processes are efficient and productive to deliver the best possible results for our customers. Our purpose is underpinned by five values: Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Hybrid Working We have a Hybrid approach to working here at Engine - our preference is that you're located within a commutable distance of one of our offices so that we're able to interact and collaborate in person. About Engineering at Engine by Starling - As a Security Engineer at Engine, you'll be working on helping to keep our infrastructure secure and compliant and our staff safe and productive. You'll be working on projects covering identity and access management, cloud and network security, vulnerability management, security monitoring, security hardening, compliance reviews, and more. It's a very varied role with lots of close interaction with the infrastructure, security engineering, cross-cutting and compliance teams. We are looking for an experienced Senior / Staff level GCP Security Engineer to join our established Security Engineering team, working closely with Information Security, Infrastructure and the various Engine Technology teams to make sure security is at the heart of all our technical processes. As our subject matter expert, you will take ownership of engineering the security foundations of our Google Cloud Platform environment. This is a hands-on role for a specialist with a proven track record of designing, building, and automating security controls specifically for GCP, including hardened GKE clusters. Engine by Starling engineers are excited about helping us deliver new features, regardless of what their primary tech stack may be. Hear from the team in our latest Blog or our case studies with Women in Tech. As a GCP Security Engineer, you will: Collaborate with stakeholders to define our Google Cloud security architecture (cloud identity, runtime security, security posture) Design, document, build and maintain a secure and scalable infrastructure on GCP using Infrastructure as Code Be part of the team responsible for safeguarding our systems, applications and data by ensuring secure user access, authentication and authorisation mechanisms are in place Engineer and automate technical controls within GCP to ensure and demonstrate continuous compliance with stringent standards such as PCI DSS and 3DS Drive security infrastructure deployments across our growing environments Perform regular security assessments, audits, threat modelling and architecture design reviews to identify risks and vulnerabilities, triage found risks, identify improvements appropriately and design controls to implement as corrective actions Lead incident response efforts, including investigation and remediation of security breaches Support our internal security awareness and training programs, advocating the DevSecOps mindset that we have created across our technology teams Requirements We're open-minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. If you have an innate passion for security and care enough to find elegant solutions to difficult problems, we'd love to hear from you. What skills are essential: Mature understanding of cloud security architecture, with deep expertise in GCP and a proven track record Experience creating a GCP landing zone, configuring services such as organisation policies and VPC Service Controls A deep understanding of GCP IAM and its limitations Experience with service-oriented architecture using containers, distributed systems and immutable infrastructure on GCP (including GKE, Compute Engine, Shared VPC and Cloud SQL) Expertise in Kubernetes, securing clusters (GKE) and meshes (Cilium is preferable), networking best practices and RBAC implementation (CKA, CKS qualifications are a plus) Experience with Infrastructure as Code and infrastructure provisioning tools, particularly Terraform Experience configuring GCP-native security posture and threat management with Security Command Center Experience securing the software supply chain with Binary Authorization, Artifact Registry and Artifact Analysis Experience with key and secret management on GCP - Cloud KMS, Cloud External Key Manager (EKM) and Secret Manager - including cryptographic key ceremonies Experience with Workload Identity and Workload Identity Federation for keyless authentication of workloads and CI/CD Experience configuring and utilising cloud-native security logging, monitoring and detection services Strong programming skills - in security we write our own scripts for automation in Python, Go and other languages while contributing to open-source tools so we can utilise them In-depth knowledge of security principles, technologies, best practices, and threat detection and mitigation strategies Knowledge of common attack vectors and methodologies (OWASP Top 10, MITRE ATT&CK Framework and social engineering tactics) The ability to identify potential threats, attack vectors and vulnerabilities in systems and applications The ability to document security requirements from various stakeholders Excellent problem-solving, communication and active listening skills with an innate passion for security The ability to identify security gaps and create solutions to minimise risk and impact to us A proactive approach to staying updated with the latest security threats, vulnerabilities and mitigation techniques Thorough understanding of the incident response process (preparation, identification, containment, eradication, recovery, lessons learned) What skills are desirable: In-depth knowledge of network security, including core routing and switching concepts (TCP/IP, BGP, VPNs), security controls (firewalls, WAFs, IDS/IPS), and practical experience designing hybrid connectivity between GCP and on-premise environments Experience with data-residency and regulated-workload controls such as Assured Workloads and Access Transparency, relevant to deploying per-market for different banks' regulators Hands-on experience taking a company through security and compliance frameworks like NIST, SOC 2, ISO 27001 and PCI DSS Experience automating security controls and compliance checks against standards and frameworks including SOC 2, ISO 27001 and PCI DSS / 3DS Container security knowledge including container image provenance (e.g. Sigstore, Notary) with an in-depth knowledge of container runtimes, and an understanding of integrating security into the software development lifecycle Experience performing secure code reviews and security approvals, including the use of static and dynamic application security testing (SAST / DAST) tools Experience in cryptography management and enhancements Relevant security certifications such as ISC2 CC, CISSP, CCSP, CISM, AWS Security Specialty or GCP Professional Cloud Security Engineer The main part of our tech stack is listed below. We don't ask that you have experience in all of it, but if you do, that's great! Java, which makes up the majority of our backend codebase GCP and AWS - we're cloud-native Microservice-based architecture Kubernetes (GKE on GCP, EKS on AWS) TeamCity for CI/CD (with multiple production releases per day) Terraform and Grafana RDS and CloudSQL for PostgreSQL Our Interview Process: Interviewing is a two-way process and we want you to have the time and opportunity to get to know us, as much as we are getting to know you! Our interviews are conversational and we want to get the best from you, so come with questions and be curious. In general you can expect the below, following a chat with one of our Talent Team: Initial interview with an Engineer - 45 minutes Take-home technical test, to be discussed in the next interview . click apply for full job details

Role: Senior C# .NET Developer Location: London, UK Working Pattern: Hybrid, 3 days per week onsite, Canary Wharf or Liverpool Street Employment Type: Contract Rate: 500 a day Inside IR35 via Umbrella Role Overview We are seeking experienced Senior C# .NET Developers to join a strategic technology transformation programme within a leading international banking environment. The successful candidates will design, develop and enhance enterprise-grade applications supporting critical business functions across front-office, middle-office and back-office domains. They will work closely with Solution Architects, Technical Analysts, Business Analysts, Data Engineers and QA teams to deliver scalable, secure and high-performing solutions in a highly regulated environment. Key Responsibilities Design, develop and maintain enterprise applications using C# and .NET. Develop scalable, secure and high-performance APIs, services and distributed applications. Work with Technical Analysts and business stakeholders to translate requirements into technical solutions. Contribute to solution architecture, technical design and code reviews. Develop RESTful APIs and integration services. Implement monitoring, logging and error handling. Work with relational and non-relational databases. Develop automated unit, integration and regression tests. Support CI/CD and DevOps practices. Troubleshoot production issues and perform root-cause analysis. Follow engineering, security and development standards. Participate in Agile delivery. Support application modernisation and cloud adoption. Mandatory Skills Strong commercial C#/.NET development experience .NET Core / .NET 6+ ASP.NET Core / Web API REST APIs and microservices SQL Server, including complex queries, stored procedures and optimisation Entity Framework / ORM Object-oriented design and design patterns Distributed systems and enterprise integration Unit and automated testing Azure DevOps, Git and CI/CD Agile/Scrum delivery Strong troubleshooting and problem-solving capability Good stakeholder communication Desirable Banking, Capital Markets or Financial Services Azure Docker / Kubernetes Kafka, RabbitMQ or Azure Service Bus Event-driven architectures React / Angular Cloud-native development Application observability and performance engineering DevSecOps and secure coding Preferred Stack C# .NET Core/.NET 8 ASP.NET Core REST APIs SQL Server Entity Framework Azure Azure DevOps Git Docker Kubernetes Kafka Redis JSON/XML Swagger/OpenAPI Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.

Job title: AWS DevOps Engineer (SC Cleared) Role Type: Contract, full time hours Location: Remote Working (Occasional travel to UK wide sites) Rate: £465.00 Per Day - Inside IR35 via Umbrella Length: 6 months initial Our government client is seeking an experienced AWS DevOps Engineer with active SC Clearance to design, build and support secure, reliable cloud platforms. You will work closely with development and QA teams to improve delivery, performance and automation across containerised, Microservices-based applications. Key Responsibilities - Design, build and maintain AWS infrastructure using Terraform and/or CloudFormation. Implement and optimise CI/CD pipelines. Support Docker, Kubernetes and microservices-based applications. Monitor and improve platform performance, security and reliability. Champion DevOps best practice and continuous improvement across Agile teams. Essential Skills - Active SC Clearance. Strong hands-on AWS experience. Terraform and/or CloudFormation. CI/CD tooling such as Jenkins, GitHub Actions or Azure DevOps. Docker, Kubernetes and Linux administration. Experience supporting microservices architectures. Knowledge of cloud security and DevSecOps principles. Experience working in Agile delivery teams. Government or GDS project experience. Automated testing environments using Selenium or Cucumber. Experience supporting Java-based applications. AWS certification. If you are a UK based SC cleared AWS DevOps Engineer who enjoys building secure, automated cloud platforms, please apply now with your CV for consideration!

Application Security Engineer (12-Month Fixed Term Contract) Help Build Security into Products That Matter We're looking for an experienced Application Security Engineer to join our Security Engineering team on a 12-month fixed-term contract. This isn't a role where security sits on the side-lines. You'll be Embedded in product delivery, working directly with engineers, architects and product teams to ensure security is considered from the earliest design conversations through to deployment and beyond. You'll combine technical expertise with practical problem-solving, helping teams build secure solutions without slowing innovation. If you enjoy collaborating with developers, influencing technical decisions, and turning security challenges into workable solutions, we'd love to hear from you. What You'll Be Doing As the dedicated Application Security Engineer for a portfolio of customer-facing and digital products, you'll be trusted to: Partner with product and engineering teams to understand systems, data flows, users and business priorities. Review solution designs and facilitate threat modelling workshops, helping teams identify risks before they become problems. Provide practical, real-world guidance on secure architecture and development across applications, APIs, cloud services and integrations. Help teams embed security into their development pipelines through automation, tooling and security-by-design practices. Investigate, triage and prioritise vulnerabilities, translating technical findings into clear actions for development teams. Coordinate penetration testing activities and support teams through remediation and re-testing. Assess the security of SaaS platforms, third-party technologies and external integrations. Work closely with Security Operations, Identity & Access Management and Cloud Security colleagues where risks cross functional boundaries. Represent security interests within technical governance forums, providing balanced advice and escalating significant risks when required. Contribute to evolving security standards, secure development practices and application security maturity across the organisation. Maintain clear records of decisions, risks and recommendations, ensuring a smooth handover at the end of the contract. About You You're someone who enjoys solving problems, building relationships and making security relevant and actionable. You understand that the best security professionals don't just identify risks, they help teams address them in practical ways. You'll have experience across areas such as: Secure by Design principles Threat modelling Application security testing Vulnerability management Security risk assessment Secure software development practices Experience with technologies such as Java/Spring Boot, React, Node.js, Snowflake, Salesforce, Kubernetes/OpenShift, Snyk or Wiz would be beneficial, but we're equally interested in candidates who have gained relevant experience across different technology stacks and tooling. What We're Looking For You'll likely have: Experience working in Application Security, Product Security or Secure Software Engineering. A strong understanding of common application and API security risks, including authentication, authorisation, data protection and security misconfiguration. Experience reviewing architectures and facilitating threat modelling workshops using STRIDE or similar methodologies. Hands-on experience with security testing practices and tools, including SAST, software composition analysis, secrets detection, API security testing and infrastructure or container scanning. The ability to assess vulnerabilities through both a technical and business lens, helping teams focus on what matters most. Familiarity with modern engineering environments, including cloud platforms, CI/CD pipelines and containerised applications. Strong communication and stakeholder management skills, with the confidence to challenge constructively and influence decision-making at all levels. Who You'll Be Working With You'll be joining a collaborative and supportive Security Engineering function made up of specialists in: Application Security Penetration Testing Red Teaming Cloud Security Engineering Secure SDLC DevSecOps and CI/CD Security Software Development You'll also build strong relationships with architects, engineers, product managers and delivery teams across the business, helping create security solutions that work in the real world. Why Join Us? This is an opportunity to make a genuine impact. You'll have the autonomy to shape security outcomes, influence product decisions and work with teams that value security as an enabler rather than a blocker. If you're passionate about secure development, enjoy working closely with engineering teams and want to help build resilient products in a modern technology environment, we'd love to hear from you.

DV Cleared Security Engineer As a Security Engineer, you'll help design, build, and deliver secure digital solutions in highly secure environments. You'll work alongside engineers, architects, and delivery specialists to develop technology that enables faster, safer decision-making for critical operations. We are looking for someone who has experience with deploying and managing both security tooling (vulnerability scanning, EDR Agents, etc) and identity solutions (Directory services, IdPs, Privileged Access Management solutions). You will need to have a basic understanding of threat frameworks (such as ATT&CK) and MOD assurance policies, as well as experience working at a technical low design level. Finally, you will need knowledge and experience of Agile, DevSecOps, CI/CD Principles and their application in secure environments. Your work may include: Credential Lifecycle Management Manually creating or bulk-importing passwords, SSH keys, and API keys Configuring and verifying Remote Password Changing (RPC) to ensure credentials rotate on a set schedule without service interruption. Checking our Servers can successfully communicate with target systems to validate that stored credentials are still correct. Discovery & Network Visibility Running regular Discovery scans across Active Directory and network segments to identify new privileged accounts, service accounts, and dependencies. Mapping how service accounts are used by Windows Services, Scheduled Tasks, or IIS Application Pools to ensure rotation doesn't break critical systems. System Maintenance & Performance Proactive management of technical vulnerabilities and system security. Monitoring the status of Distributed Engines (DE) to ensure they are online and processing tasks like heartbeats and password changes without latency. Monitor and improve performance and ensure all secrets are bound to launchers, and secret templates are used and updated as required. Configuring and verifying automated database backups (full, differential, and log) to meet Recovery Point Objectives (RPO). Applying security patches and upgrades to our platforms Maintain the Licenses/certifications and update where required Check the results of recent Discovery scans to see if new privileged accounts, service accounts, or dependencies were found. Access Governance Managing Role-Based Access Control (RBAC) by creating roles, defining folder structures, and setting granular permissions for users and groups. Audit & Compliance Generating and reviewing audit logs and reports (eg, most active users, failed heartbeats) to detect unusual activity and prove compliance. Configuring launchers to record privileged sessions, allowing or disallowing for full keystroke and video audits of administrative work. Technical Troubleshooting Resolving issues related to Firewall requests, load balancer configuration. Security Oversight Monitor Active Sessions: Session Monitoring for any currently active privileged sessions, particularly on high-value assets like Domain Controllers. Troubleshoot any Remote Password Changing (RPC) failures from the previous 24 hours to prevent account lockouts or "stale" credentials. Correlate server alerts with your SIEM to investigate suspicious activity, such as multiple failed login attempts or large-scale secret exports. Security Clearance Due to the nature of the work, candidates must be UK sole nationals and hold current DV clearance

DevOps Engineer Salary: 55,000- 65,000 DOE Working Arrangement: Hybrid - 2 days per week in the office (including Thursdays) Job Type: Permanent, Full-Time About the Opportunity We are recruiting for an experienced DevOps Engineer to join a growing infrastructure team within an established, technology-driven business. This is an exciting opportunity to take ownership of cloud-hosted infrastructure, automation, CI/CD pipelines and infrastructure security, working closely with Software Development and Technical Support teams. The successful candidate will join a collaborative and supportive environment, with a strong emphasis on technical best practices, continuous improvement and work-life balance. Key Responsibilities Maintain, develop and optimise Azure DevOps pipelines and CI/CD processes. Design, implement and manage cloud-hosted infrastructure using Terraform (Infrastructure as Code). Automate infrastructure provisioning, deployment and operational processes. Support business-as-usual (BAU) infrastructure activities, ensuring system reliability, security and performance. Work closely with Software Engineers to streamline deployment processes and improve development workflows. Take ownership of infrastructure responsibilities, reducing reliance on Software Development teams. Implement and maintain cybersecurity, technical governance and infrastructure controls. Identify opportunities to improve infrastructure efficiency, scalability and automation. Promote DevOps best practices across the wider technical function. Support containerised applications and cloud infrastructure environments. Essential Skills & Experience Proven experience working as a DevOps Engineer or in a similar infrastructure-focused role. Strong hands-on experience with Terraform and Infrastructure as Code (IaC) . Experience using Azure DevOps, Azure Pipelines and CI/CD . Solid understanding of cloud infrastructure management, deployment and maintenance. Experience supporting BAU infrastructure operations. Strong knowledge of DevOps methodologies, automation and infrastructure best practices. Ability to work independently, troubleshoot technical issues and take ownership of projects. Confident collaborating with Software Development and wider technical teams. Desirable Skills Strong experience with Microsoft Azure cloud environments. Knowledge of Kubernetes and containerisation technologies . Understanding of DevSecOps principles and cloud security. Familiarity with .NET applications and development environments. Experience implementing technical governance and cybersecurity controls. About You We are looking for a proactive, technically capable DevOps Engineer who can quickly become a valuable member of the team. You will be comfortable working autonomously, taking responsibility for infrastructure improvements and contributing to technical decisions. Strong communication skills, a collaborative approach and the ability to balance project delivery with operational support will be essential. Experience from any industry will be considered, provided you have the relevant technical expertise. What's on Offer? Salary of 55,000- 65,000 , depending on experience. Hybrid working - just 2 office days per week. Excellent work-life balance and flexibility. Additional company benefits (details to be confirmed). Collaborative, relaxed and supportive working environment. Opportunity to take ownership of key infrastructure projects. Work with modern cloud technologies, automation and DevOps practices. Join a growing team with opportunities to influence infrastructure strategy and technical improvements. Apply Now If you're an experienced DevOps Engineer with strong Terraform, Azure DevOps and CI/CD expertise, looking for a role offering technical ownership, flexibility and a positive team environment, we'd love to hear from you.

WebMethods SME - Active SC £655 per day - Inside IR35 London/Bristol - 1 day a week 6 months Key Requirements: Proven commercial experience working extensively with WebMethods products with Active SC clearance within secure Defence or Public Sector environments. Strong hands-on experience with webMethods 10.15+, including Integration Server, Flow Services, API Gateway and Universal Messaging. Proven capability developing, supporting and troubleshooting REST/SOAP integrations and enterprise integration services. Experience working with Azure, containerised environments and Kubernetes technologies, including pods, services and ingress. Strong understanding of API-led integration, JMS messaging, Swagger/OpenAPI and integration best practices. Experience integrating with enterprise data sources and platforms, including AWS S3, Oracle, SQL Server, MySQL and Elastic/OpenSearch. Ability to support live production platforms, resolve defects and maintain secure, high-performing integration services. Comfortable working within Agile delivery teams, collaborating with Product Owners, QA and DevSecOps teams using Jira and Confluence.

Application Security Engineer (12-Month Fixed Term Contract) Help Build Security into Products That Matter We're looking for an experienced Application Security Engineer to join our Security Engineering team on a 12-month fixed-term contract. This isn't a role where security sits on the side-lines. You'll be Embedded in product delivery, working directly with engineers, architects and product teams to ensure security is considered from the earliest design conversations through to deployment and beyond. You'll combine technical expertise with practical problem-solving, helping teams build secure solutions without slowing innovation. If you enjoy collaborating with developers, influencing technical decisions, and turning security challenges into workable solutions, we'd love to hear from you. What You'll Be Doing As the dedicated Application Security Engineer for a portfolio of customer-facing and digital products, you'll be trusted to: Partner with product and engineering teams to understand systems, data flows, users and business priorities. Review solution designs and facilitate threat modelling workshops, helping teams identify risks before they become problems. Provide practical, real-world guidance on secure architecture and development across applications, APIs, cloud services and integrations. Help teams embed security into their development pipelines through automation, tooling and security-by-design practices. Investigate, triage and prioritise vulnerabilities, translating technical findings into clear actions for development teams. Coordinate penetration testing activities and support teams through remediation and re-testing. Assess the security of SaaS platforms, third-party technologies and external integrations. Work closely with Security Operations, Identity & Access Management and Cloud Security colleagues where risks cross functional boundaries. Represent security interests within technical governance forums, providing balanced advice and escalating significant risks when required. Contribute to evolving security standards, secure development practices and application security maturity across the organisation. Maintain clear records of decisions, risks and recommendations, ensuring a smooth handover at the end of the contract. About You You're someone who enjoys solving problems, building relationships and making security relevant and actionable. You understand that the best security professionals don't just identify risks, they help teams address them in practical ways. You'll have experience across areas such as: Secure by Design principles Threat modelling Application security testing Vulnerability management Security risk assessment Secure software development practices Experience with technologies such as Java/Spring Boot, React, Node.js, Snowflake, Salesforce, Kubernetes/OpenShift, Snyk or Wiz would be beneficial, but we're equally interested in candidates who have gained relevant experience across different technology stacks and tooling. What We're Looking For You'll likely have: Experience working in Application Security, Product Security or Secure Software Engineering. A strong understanding of common application and API security risks, including authentication, authorisation, data protection and security misconfiguration. Experience reviewing architectures and facilitating threat modelling workshops using STRIDE or similar methodologies. Hands-on experience with security testing practices and tools, including SAST, software composition analysis, secrets detection, API security testing and infrastructure or container scanning. The ability to assess vulnerabilities through both a technical and business lens, helping teams focus on what matters most. Familiarity with modern engineering environments, including cloud platforms, CI/CD pipelines and containerised applications. Strong communication and stakeholder management skills, with the confidence to challenge constructively and influence decision-making at all levels. Who You'll Be Working With You'll be joining a collaborative and supportive Security Engineering function made up of specialists in: Application Security Penetration Testing Red Teaming Cloud Security Engineering Secure SDLC DevSecOps and CI/CD Security Software Development You'll also build strong relationships with architects, engineers, product managers and delivery teams across the business, helping create security solutions that work in the real world. Why Join Us? This is an opportunity to make a genuine impact. You'll have the autonomy to shape security outcomes, influence product decisions and work with teams that value security as an enabler rather than a blocker. If you're passionate about secure development, enjoy working closely with engineering teams and want to help build resilient products in a modern technology environment, we'd love to hear from you.

Cloud Security Consultant x3 MUST BE SC CLEARED - UK Wide £90-£110k Our client a leading outsourcing organisation is looking for a number of Cloud Security Consultant's you'll work closely with clients and colleagues to design and implement secure cloud solutions. Duties Supporting clients in developing enterprise security use cases aligned with their Cloud strategy Designing and building security reference architectures for public, private, and hybrid Cloud systems Collaborating on the architecture, design, and deployment of secure Cloud environments Working with cross-functional teams to select technologies to support cloud deployments and integrate across hybrid IT ecosystems Sharing knowledge and coaching others-both clients and internal teams-on security technologies and best practices Skills/Experience Producing security, configuration, deployment and devsecops models for cloud-based services Producing secure cloud architectures and governance models Protecting cloud environments across network, application, and data layers, abiding by zero trust principles Conducting threat modelling and design reviews as part of secure by design Using automation and orchestration tools to manage secure deployments, potentially including use of agentic AI Hold relevant vendor security certifications from one or more cloud hyperscalers

Senior DevOps Engineer AWS / Kubernetes / Terraform / CI/CD / Infrastructure as Code Oxfordshire (Hybrid - 2 days a week in the office) 85,000 - 110,000 DOE Want to be the senior voice on infrastructure, with real say over how software reaches production? This Senior DevOps Engineer role is with a growing UK technology company building AI-led products for customers who work in high-stakes sectors. You'll be the most experienced platform engineer in a small team, with direct influence over the tools, standards and priorities the engineering group works to. It's a permanent role in Oxfordshire, hybrid, with 2 days a week in the office. What You'll Be Doing Designing and running secure multi-account AWS environments, defined entirely as code Managing container platforms in the cloud and on-premises, with automated GitOps-style deployments Leading security reviews and hardening across the estate Owning monitoring, alerting and resilience, including regular backup and recovery testing Keeping cloud spend and capacity under control, and supporting compliance audits Handling incidents and coaching developers on secure delivery What You'll Bring A strong DevOps or SRE background, with recent hands-on AWS experience Deep Kubernetes experience, ideally including on-premises clusters, plus Helm Terraform, CI/CD pipelines and GitOps tooling, with Docker and Linux Experience managing artifact repositories and integrating single sign-on Scripting in Bash and Python or Go, and security testing built into pipelines Desirable: MLOps experience, Prometheus-style observability, security frameworks such as ISO 27001, active SC clearance What's On Offer Pension with employer contribution Private healthcare Generous holiday allowance Hybrid working, 2 days a week in the office Please note: You must be eligible for UK security clearance (BPSS and SC), which requires a UK passport and 5 years of continuous UK residency. Clearance can be sponsored for the right candidate. Apply today with your CV for this Senior DevOps Engineer role and we'll be in touch. This role may suit candidates who have held roles including: Senior Site Reliability Engineer, Cloud Platform Engineer, Senior AWS Engineer, DevSecOps Engineer, Kubernetes Engineer, Platform Engineer, Infrastructure Engineer Deerfoot Recruitment Solutions Ltd is a leading independent tech recruitment consultancy in the UK. For every CV sent to clients, we donate 1 to The Born Free Foundation. We are a Climate Action Workforce in partnership with Ecologi. If this role isn't right for you, explore our referral reward program with payouts at interview and placement milestones. Visit our website for details. Deerfoot Recruitment Solutions Ltd is acting as an Employment Agency in relation to this vacancy.

Cloud Security Consultant x3 MUST BE SC CLEARED - UK Wide £90-£110k Our client a leading outsourcing organisation is looking for a number of Cloud Security Consultant's you'll work closely with clients and colleagues to design and implement secure cloud solutions. Duties Supporting clients in developing enterprise security use cases aligned with their Cloud strategy Designing and building security reference architectures for public, private, and hybrid Cloud systems Collaborating on the architecture, design, and deployment of secure Cloud environments Working with cross-functional teams to select technologies to support cloud deployments and integrate across hybrid IT ecosystems Sharing knowledge and coaching others-both clients and internal teams-on security technologies and best practices Skills/Experience Producing security, configuration, deployment and devsecops models for cloud-based services Producing secure cloud architectures and governance models Protecting cloud environments across network, application, and data layers, abiding by zero trust principles Conducting threat modelling and design reviews as part of secure by design Using automation and orchestration tools to manage secure deployments, potentially including use of agentic AI Hold relevant vendor security certifications from one or more cloud hyperscalers

DV Cleared Software Developers Join a global technology organisation at the forefront of delivering secure, mission-critical digital platforms. As investment continues across high-security programmes, we're looking for experienced DV-cleared engineers to help design, build and operate resilient, cloud-native infrastructure that underpins some of the UK's most sensitive environments. The Opportunity Working as part of a highly skilled engineering team, you'll develop and support modern platforms using automation, cloud technologies and Infrastructure-as-Code. You'll play a key role in creating scalable, secure environments, improving deployment pipelines, and embedding security throughout the software delivery life cycle. This is an opportunity to work with cutting-edge technologies on projects where reliability, innovation and security are paramount. What You'll Bring Strong software engineering experience using languages such as Java, Python or C# Hands-on experience with modern DevOps tooling, including CI/CD platforms such as Jenkins or GitLab Experience working with cloud platforms (AWS, Azure or Google Cloud) Knowledge of containerisation technologies including Docker and Kubernetes Experience with Infrastructure-as-Code tools such as Terraform or Ansible Ability to thrive in a collaborative, fast-moving engineering environment Active UK Developed Vetting (DV) clearance is essential Desirable Experience Background in Platform Engineering, DevOps or Site Reliability Engineering Experience implementing secure-by-design or DevSecOps practices Previous work within defence, national security, government or other highly regulated environments If you're passionate about building secure, automated platforms and want to work on technology that supports nationally important programmes, we'd love to hear from yo

Location: Crawley, United Kingdom Thales is a global technology leader with more than 83,000 employees on five continents. With over 7,500 people in the UK, operating across defence, space, aerospace, and digital security, we help build a future we can all trust. Thales supports the security and stability of our nation by providing extraordinary technology to our customers, as well as delivering social value to the UK with our products and services. Thales is transforming the way in which we deliver our tools to engineers. In this role you will be helping to build the next generation of Engineering Environments in the UK using modern deployment methods on a cloud based platform. As a Technical Product Owner, you will work both as part of an agile development team and as part of our Technical Leadership team. You will maximise the value of the products delivered by the development / deployment team and are in charge of satisfying the needs of the internal customers. You will also act as the primary interface between the development team, the Portfolio Product Owner and the end users of the engineering environments. You will also act as the Technical Authority/Architect for your specific area. Key responsibilities: Represents the engineering customers/users of the Engineering Environments. Specifies the needs, validates the acceptance criteria and approves the completed features. Defines the order in which the features for their team will be developed and works with the Portfolio Product Owner and other Product Owners to ensure that this fits with the objectives for the overall team. Takes important decisions concerning the direction the solutions for their team. Is accountable for the Product Backlog for their team in terms of content and priorities. Collects feedback from end users and other stakeholders during iteration reviews Right for this role? Ideally you'll have a software or systems engineering background in order to understand and credibly represent & promote best practice ways of working and tooled up processes. One of these roles will champion the non-LEWIS applications (old and new, and how we archive programme work securely), and the other will be more cloud software development environment biased. We recruit at many levels so we would be very interested to hear from you regardless of your length of experience. However, the following would be very beneficial: Thorough understanding of, and experience of applying, the current best practices for software development including: DevSecOps, Agile, CI/CD, TDD, BDD, XP and Lean. Understanding of both cloud and secure development environments to be able to architect and improve both existing and new bespoke environments. Ability to define and implement a suite of service offerings to support their architected development environments including required tooling, infrastructure, and internal services. Good understanding of cloud and enabling technologies and practices including Kubernetes, Containers, GitOps. Experience in some or all of the following software applications is a plus: Attlassian Suite (Jira, Bitbucket, Confluence) Jfrog Platform (Artifactory/XRay) GitLab Black Duck Siemens Polarion Thales is a great place to work so diversity, integrity and a passion for what we do are very important drivers for us. We are looking for people from a broad range of engineering disciplines, so no matter your background we would love to hear from you. Benefits: Performance-related bonus Half day every Friday, usually finishing around 13:00 28 days annual leave (plus bank holidays) with opportunity to buy up to 40 hours/year (pro rata) 24 hours volunteering paid for Private healthcare Pension scheme Life cover 24/7 Employee Assistance Program and access to mental wellbeing app Employee discount shopping schemes on major brands and retailers Gym membership discounts Security Clearance Requirement: Due to the nature of the work that we do at Thales, many of our roles are subject to security restrictions. This role requires you to be a UK National and achieve Security Clearance (SC) without any caveats. It would be advantageous if currently held, however, if not currently held, it is a requirement that the successful applicant undergo, achieve, and maintain SC Clearance prior to commencing employment. If approved by the MOD, a dual national from a non-ITAR country may be considered. To be eligible for full SC, you generally need to have resided in the UK for the last 5 years. In some circumstances, a minimum of 3 years' residence in the UK over the last 5 years may be accepted, with additional overseas checks. Please visit the UKSV website for further guidance: . At Thales, we ensure equal opportunities, pay and working conditions for all. The benefits we offer include private medical insurance, buying or selling annual leave, cycle to work schemes, employee discounts, paid volunteering day, stocks and shares, annual bonus and much more depending on the role. Read more about our benefits here. We are committed to creating a workplace where everyone feels valued for who they are and the unique strengths they bring. Discover more about our programmes, employee networks, wellbeing policies, and inclusive features here. If this role isn't quite right for you, we encourage you to join our talent community where your details will be shared with our recruitment teams for other potential opportunities. Join the Talent Community here. Join Thales in the UK - Innovate with us and shape the future!

Cloud Security Consultant x3 MUST BE SC CLEARED - UK Wide 90- 110k Our client a leading outsourcing organisation is looking for a number of Cloud Security Consultant's you'll work closely with clients and colleagues to design and implement secure cloud solutions. Duties Supporting clients in developing enterprise security use cases aligned with their Cloud strategy Designing and building security reference architectures for public, private, and hybrid Cloud systems Collaborating on the architecture, design, and deployment of secure Cloud environments Working with cross-functional teams to select technologies to support cloud deployments and integrate across hybrid IT ecosystems Sharing knowledge and coaching others-both clients and internal teams-on security technologies and best practices Skills / Experience Producing security, configuration, deployment and devsecops models for cloud-based services Producing secure cloud architectures and governance models Protecting cloud environments across network, application, and data layers, abiding by zero trust principles Conducting threat modelling and design reviews as part of secure by design Using automation and orchestration tools to manage secure deployments, potentially including use of agentic AI Hold relevant vendor security certifications from one or more cloud hyperscalers