DevSecOps Engineer

Sanderson G&D are working with a fast growing Cyber Security consultancy delivering secure, user-focused digital services for the UK Government. They’re looking for an experienced Application Security / DevSecOps Engineer to embed security at the heart of modern software delivery.

This is a newly defined role focused on integrating security into the software development lifecycle (SDLC). You’ll play a critical part in shifting security left, guiding engineering teams, testing controls, and supporting secure design across a range of digital services.

The Role

This is far more than just an AppSec testing role. You’ll be embedded into agile product teams, helping them design and build secure digital services from the ground up.

Your day-to-day might include:

• Conducting hands-on threat modelling and secure design reviews
• Testing APIs and infrastructure manually and with tools like Burp Suite, ZAP, and Nessus
• Driving secure-by-design principles across CI/CD pipelines
• Working across cloud-native platforms (AWS, Azure) and tooling (GitHub, Python, etc.)
• Collaborating with platform and DevOps teams to harden cloud environments
• Supporting the integration of security data into a centralised platform (Splunk) and developing dashboards to visualise risk across services

You’ll be a key player in embedding AppSec into a fast-moving digital environment with tangible real-world impact.

What We’re Looking For

• Hands-on expertise in application and cloud security within CI/CD environments
• Deep understanding of cyber-attack methodologies, threat modelling, and security controls
• Experience security testing APIs and infrastructure - both manually and using automated tools
• Familiarity with Splunk (or a willingness to learn) for visualising service-level risk and posture
• Ability to engage engineering teams in practical, developer-friendly ways
• Proficient in Python or a similar language and confident using developer tooling like GitHub

Why This Role?

• High-impact work shaping the security of digital services that matter
• Significant autonomy and opportunity to lead security best practices across teams
• Opportunity to influence tooling, process, and culture
• Remote working with limited travel
• Long-term progression in a growing, supportive business

Security Clearance:Must hold active SC clearance

Want to shape how modern digital services are secured?

Apply now or get in touch for a confidential chat.