Senior DevSecOps Engineer

About the role

The Senior DevSecOps Engineer will design, build, secure and operate the software delivery infrastructure for advanced autonomous defence systems. This role bridges software, platform, cyber security and defence systems engineering, working closely with autonomy, integration and test teams.

Key responsibilities

• Design, build, and operate secure development and deployment infrastructure for Shield AI autonomy and defence programmes.
• Develop and maintain CI/CD pipelines that enable rapid, repeatable, and secure delivery of autonomy and mission software.
• Embed security throughout the software development lifecycle, integrating controls, testing, evidence and assurance into engineering workflows.
• Apply UK MOD Secure by Design principles and guide engineering teams on cyber security responsibilities.
• Collaborate with software, autonomy, systems, cyber security, integration and test engineers to create development environments that meet defence security requirements.
• Design and maintain environments spanning cloud, on‑premises, laboratory, simulation, hardware‑in‑the‑loop and operational platforms.
• Enable secure software development across different security classifications with appropriately segmented environments.
• Implement automated security controls in CI/CD pipelines, including static analysis, dependency scanning, container scanning, secrets detection, software composition analysis, vulnerability management and policy enforcement.
• Champion a DevSecOps culture where engineers own security, reliability, deployability and operational performance.

Required profile

• BS or MS in Computer Science, Software Engineering, Cyber Security, Electrical Engineering, Systems Engineering or related discipline, or equivalent practical experience.
• 5+ years of experience in DevOps, DevSecOps, platform engineering, site reliability engineering or related technical discipline.
• Significant experience delivering software within UK defence or another highly regulated national security environment.
• Strong understanding of UK Ministry of Defence/NATO DevSecOps and Secure by Design, including cyber risk management throughout the capability lifecycle.
• Experience applying MOD security policies, security assurance processes and technical security requirements to defence programmes.
• Experience developing and operating CI/CD pipelines using modern source control, build, test, artefact management and deployment technologies.
• Strong understanding of Infrastructure as Code, configuration management, containerisation and infrastructure automation.
• Experience with technologies such as Git, GitLab or GitHub, or equivalent tooling.

Required skills

• Git, GitLab, GitHub
• CI/CD pipeline development and operation
• Infrastructure as Code
• Configuration management
• Containerisation
• Static analysis
• Dependency scanning
• Container scanning
• Secrets detection
• Software composition analysis
• Vulnerability management
• Policy enforcement