FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Senior DevSecOps Engineer
CreateFuture - Design & Innovation. Drive platform and application security across client engagements .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in driving platform and application security, embedding security practices throughout the SDLC, and mentoring teams in DevSecOps capabilities. Proficient in Azure security controls, infrastructure-as-code with Terraform, and conducting thorough security assessments and incident responses.
Highest-signal resume keywords
Azure Security ExperienceInfrastructure-As-Code SkillsDevSecOps Engineering ExperiencePenetration Testing ExperienceCompliance Analysis Experience
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
TerraformAzure Security ControlsCI/CD Security IntegrationOWASP FrameworksSecure Code ReviewThreat ModellingApplication Security AssessmentVulnerability RemediationIncident ResponseAI-Driven Security Tooling
Soft Skills
Strong Communication SkillsMentoring
Tools & Technologies
Azure DevOpsGitHub ActionsClaude CodeOWASP ZAPBurp SuiteSentinelDefender
Industry Keywords
Regulated EnvironmentsIGamingFintechHealthcareGDPRPCI DSS
Tech Stack
Tools & technologiesAWSAzureJavaJavaScriptNode.jsReactReact NativeSDLCTerraform.NET
About the role
Key responsibilities & impact- Drive platform and application security across client engagements
- Embed security thinking into every stage of the SDLC
- Mentor engineers and help build DevSecOps capabilities
- Conduct threat modelling and secure architecture reviews
- Perform white-box application and infrastructure penetration testing
- Design and implement Azure security controls using Terraform, including Entra ID, PIM, CAP, Policy, Defender and Sentinel
- Design and implement SAST, DAST, IaC and container scanning, addressing false-positive rates
- Assist with and lead security incident response activities
- Conduct impact analysis and drive end-to-end vulnerability remediation and validation
- Build and evolve AI-driven security tooling using Claude Code, StrandsAgent, AWS AgentCore or Azure equivalent
- Perform compliance analysis and implement controls aligned with regulatory standards
- Coach and onboard DevSecOps engineers and development teams
- Present security posture, risk findings and remediation roadmaps to senior stakeholders
Requirements
What you’ll need- Production experience operating in a multi-region Azure environment
- Proven experience in a senior DevSecOps / Application Security engineering role
- Proven experience working in SDLC as Dev, Quality engineer or DevOps
- Proven experience working in a consulting setting and mindset
- Strong infrastructure-as-code skills, particularly Terraform
- Azure security experience (Entra ID, PIM, CAP, Policy, Defender, Sentinel)
- Practical experience with CI/CD security integration (Azure DevOps, GitHub Actions)
- Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment
- Experience conducting or coordinating penetration testing and threat modelling
- Experience with secure code and architecture review, ideally in regulated or high-compliance environments such as iGaming, fintech, or healthcare
- Hands-on involvement in security incident response and handling
- Familiarity with GRC, TPRM and SOC capability
- Familiarity with common SIEM and SOAR platforms, their workflows and underlying data structure
- Strong communication skills
- Experience with compliance and regulatory analysis (GDPR, PCI DSS, or similar)
- Desirable: Experience building AI-powered security tooling using Claude Code, StrandsAgent, AWS AgentCore, or similar agentic frameworks
- Desirable: Experience in iGaming, lottery, or other highly regulated digital sectors
- Tech stack: Azure, Terraform, GitHub Actions, Azure DevOps, JavaScript, C#, Java, .NET, React Native, Node.js, Claude Code, OWASP ZAP, Burp Suite, Sentinel, Defender
Benefits
Comp & perks- 35 days leave (including bank holidays)
- Private medical insurance
- Enhanced parental and adoption leave
- Financial coaching
- 5% pension match
- 40 hours of paid learning and development
- Flexible working, including hybrid and remote options
- Supportive and friendly culture
- Professional and personal growth investment
- Occasional travel to client sites or CreateFuture offices when needed