DevSecOps Engineer – Security Led Delivery (London/Hybrid)

About the role

We are supporting a leading media & entertainment organisation that needs a hands‑on DevSecOps Engineer to drive security remediation, CI/CD security integration and tooling improvements across a large enterprise environment. This is a delivery‑focused, 6‑month contract role based in London with a hybrid working model.

Key responsibilities

• Own security remediation activities and drive implementation of agreed security controls.
• Integrate security checks into CI/CD pipelines and manage GitHub governance, including GitHub Advanced Security.
• Maintain and enhance SAST/DAST tooling such as CodeQL, Semgrep and OWASP ZAP.
• Implement secret, dependency, container and IaC scanning, and manage OIDC/short‑lived credentials.
• Lead vulnerability management, security remediation and pen‑testing remediation efforts.
• Collaborate with development, infrastructure, security and operations teams in an Agile/JIRA environment.

Required profile

• Strong background in DevSecOps and application security engineering.
• Proactive, organised and able to work across multiple technical domains.
• Excellent stakeholder management and delivery ownership.

Required skills

• GitHub administration and GitHub Advanced Security (GHAS).
• CI/CD pipeline security integration.
• SAST/DAST tools – CodeQL, Semgrep, OWASP ZAP.
• Secret scanning, dependency scanning, container & IaC scanning.
• OIDC and short‑lived credential management.
• Vulnerability management and security remediation.
• JIRA and Agile delivery methodologies.
• Familiarity with Datadog, SIEM, EDR and cloud/container security concepts.