FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior DevSecOps Engineer
Arbor Education. Collaborate with stakeholders to identify security enhancements across platform architecture and infrastructure .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in Cyber Security and DevSecOps engineering practices, with a strong focus on securing AI use across the SDLC and improving software supply chain security. Proficient in Infrastructure as Code tooling and vulnerability management, with a proactive approach to problem-solving and collaboration.
Highest-signal resume keywords
Cyber Security ExpertiseDevSecOps Engineering ExperienceInfrastructure as Code (Terraform, CloudFormation)Software Supply Chain Security (SBOM, Dependency Scanning)Secrets Management (Vault, Cloud-Native Secret Stores)
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Vulnerability ManagementAI Threat ModellingContainer Security (Docker)SDLC Security Tooling (SAST, DAST, SCA)Policy-as-Code (OPA, Conftest)
Soft Skills
Proactive Problem-SolvingStrong TeamworkEffective Communication
Tools & Technologies
Amazon Web ServicesDataDogPrometheusCI/CD ToolsAI-Assisted Development Tooling
Certifications & Qualifications
AWS Security SpecialtyOSCPAI Security Credentials
Industry Keywords
AI Governance FrameworksZero-Trust ApproachSoftware Best PracticesEdTech Compliance FrameworksIncident Response
Tech Stack
Tools & technologiesAWSCloudCyber SecurityDockerPHPPrometheusPythonSDLCTerraformVault
About the role
Key responsibilities & impact- Collaborate with stakeholders to identify security enhancements across platform architecture and infrastructure
- Devise and execute strategic security implementation plans
- Work with the Platform team to embed security processes, controls, and tooling across system components
- Threat model new and existing systems, including AI/LLM-enabled features and agentic workflows
- Translate threat-model findings into prioritised, actionable work
- Strengthen the software supply chain through dependency and base-image hygiene, SBOM generation, artefact signing and provenance, and pinning third-party actions and packages
- Secure AI use across the SDLC, including agentic coding tools, assistants, and MCP integrations
- Contribute to deployment framework evolution with emphasis on security, deployment speed, and system stability
- Improve platform security through secrets management and safe handling of sensitive information
- Participate in incident response, resolution, and blameless post-mortems
- Facilitate continuous improvement
- Participate in tech talks and team-based learning sessions
- Maintain current playbooks, runbooks, and comprehensive systems documentation
Requirements
What you’ll need- Extensive experience in cyber security and associated engineering practices
- Experience in vulnerability management and remediation at scale
- Proven DevOps / DevSecOps engineering experience within large-scale platforms
- Proficiency in distributed cloud systems, particularly Amazon Web Services
- Expertise in Infrastructure as Code tooling such as Terraform and CloudFormation
- Experience with PHP, Bash, or Python
- Experience with Docker and containerisation, including container and runtime security
- Experience with software supply-chain security, including SBOMs, dependency scanning, and artefact signing / provenance
- Experience with secrets management and detection, such as Vault, cloud-native secret stores, and secret-scanning in CI
- Experience with SDLC security tooling including SAST, DAST, SCA, IaC scanning, and container scanning
- Experience with policy-as-code and guardrails, such as OPA / Conftest, with an identity-centric / zero-trust approach
- Familiarity with monitoring and detection tooling such as DataDog and Prometheus
- Proactive problem-solving attitude and strong teamwork and communication skills
- Exceptional proficiency in written and spoken English
- Practical understanding of AI/LLM security risks and mitigations
- Experience securing AI-assisted and agentic development tooling
- Familiarity with AI threat modelling, adversarial techniques such as MITRE ATLAS, and AI-aware red teaming
- Awareness of AI governance and assurance frameworks such as NIST AI RMF and ISO/IEC 42001
- Confident and responsible use of AI tooling for security work
- Bonus: enterprise solutions at scale, kanban and agile processes, software best practices, EdTech compliance frameworks, and relevant certifications such as AWS Security Specialty, OSCP, or AI security / governance credentials
- Must be able to work without visa sponsorship; Arbor Education cannot provide visa sponsorship
Benefits
Comp & perks- Dedicated wellbeing team and initiatives including mindfulness, lunch n learns, manager training, and mental health first aid training
- 32 days holiday plus Bank Holidays
- Life Assurance paid out at 3x annual salary
- Comprehensive AIG Smart Health wellness benefit with 24/7 virtual GP, mental health support, counselling, and personalised health checks
- Private Dental Insurance with Bupa
- Salary sacrifice pension provided by Scottish Widows
- Enhanced maternity and adoption leave (20 weeks full pay) and paternity leave (6 weeks full pay)
- 5 free return-to-work maternity coaching sessions
- Access to Calm and Bippit financial wellbeing coaching
- Flexible working
- Social committees and team, office, and company-wide events
- Dedicated professional development training budget, including CPD courses, upskilling resources, and professional memberships
- One paid volunteer day each year
- Dog-friendly offices
- Referral voucher valued up to £200