Lead DevSecOps Engineer

CreateFuture - Design & Innovation

. Drive cloud and application security across client engagements .

Posted 11/4/2026full-timeRemote • United KingdomSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cloud and application security, with a strong focus on implementing security controls across AWS and Azure environments. Proficient in driving continuous improvements in cloud security posture and embedding security practices throughout the software development lifecycle.

Highest-signal resume keywords

Cloud Security Posture Management (CSPM)AWS Security ExperienceAzure Security ExperiencePenetration TestingGDPR Compliance

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

TerraformCI/CDInfrastructure-as-CodeOWASP FrameworksSecure SDLCApplication Security AssessmentThreat ModellingSecure Code ReviewArchitecture ReviewCompliance Analysis

Soft Skills

Strong Communication SkillsInfluencing Senior Stakeholders

Tools & Technologies

Claude CodeStrandsAgentAWS AgentCoreGitHub ActionsEntra IDPIMCAPDefenderPolicy

Certifications & Qualifications

Azure AZ-500Azure SC-100Azure SC-200AWS Security Specialty

Industry Keywords

IGamingLotteryHighly Regulated EnvironmentsFinanceBankingGDPRGLIPCI DSSCFTCGRC

Tech Stack

Tools & technologies

AWSAzureCloudSDLCTerraform

About the role

Key responsibilities & impact

Drive cloud and application security across client engagements
Embed security thinking into every stage of the SDLC
Own clients’ cloud security posture and implement controls across AWS and Azure using Terraform
Drive continuous cloud security posture improvements (CSPM)
Establish application security frameworks, secure development policies, and AppSec maturity models
Perform architecture and code reviews
Deliver application and infrastructure penetration testing and automated cloud infrastructure scanning
Conduct threat modelling and provide actionable remediation guidance
Build and evolve AI-driven security tooling and platforms using Claude Code, StrandsAgent, and AWS AgentCore
Perform compliance analysis against GDPR, GLI, and PCI DSS and implement aligned controls
Present security posture, risk findings, and remediation roadmaps to executive stakeholders
Contribute to internal security best practices, standards, and governance through the Security Council
Coach and onboard DevSecOps engineers and development teams on modern security practices

Requirements

What you’ll need

Proven experience in a Lead or Principal DevSecOps / Application Security engineering role
Experience in iGaming, lottery, or other highly regulated digital sectors such as finance or banking
Experience with highly regulated environments, including GDPR, GLI, PCI DSS, and CFTC
CI/CD and infrastructure-as-code skills, including GitHub Actions and Terraform
Hands-on AWS and Azure security experience, including Entra ID, PIM, CAP, Defender, and Policy
Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment
Experience conducting or coordinating penetration testing and threat modelling
Experience with secure code and architecture review, ideally in regulated or high-compliance environments
Familiarity with GRC, TPRM, and SOC capabilities
Strong communication skills with the ability to influence at senior stakeholder level
Experience building AI-powered security tooling using Claude Code, StrandsAgent, AWS AgentCore, or similar agentic frameworks
Experience working in SDLC as a developer, DevOps, or cloud engineer
Azure AZ-500, SC-100, or SC-200 certificate desirable
AWS Security Specialty certification or solution architect desirable

Benefits

Comp & perks

Flexible working, including hybrid and remote options
Occasional travel to client sites or CreateFuture offices when needed
Supportive and friendly culture
Investment in professional and personal growth
Clear, fair and respectful hiring process
Application adjustments or support available when needed