DevSecOps Engineer - Contract | Initial 6 Months | Remote UK I £650 per day Change Digital is partnering with a global organisation undergoing a major platform transformation and is seeking a Senior Product Security Engineer to help embed security into software delivery at scale.
This is a hands-on role focused on building secure-by-default engineering platforms, improving developer experience, and accelerating vulnerability remediation through automation rather than manual security reviews.
What You'll Be Doing
- Build secure-by-default CI/CD pipelines and reusable security components
- Embed SAST, SCA, DAST, secret scanning and IaC security checks into engineering workflows
- Improve vulnerability visibility, prioritisation and CVE remediation speed
- Partner directly with development teams to solve complex security challenges
- Facilitate threat modelling and provide secure design guidance
- Drive software supply chain security, dependency governance and secure development standards
- Define practical guardrails for AI-assisted development and AI-enabled products
- Champion a "paved road" approach where secure delivery is the easiest option for engineers
What We're Looking For
- Strong Product Security, Application Security or DevSecOps experience
- Software engineering background with Python, Java and/or TypeScript
- Experience building security into CI/CD pipelines at scale
- Strong knowledge of SAST, DAST, SCA, Secrets Scanning and IaC Security
- Experience working with GitLab, GitHub Actions or similar CI/CD platforms
- AWS, container and cloud security experience
- Strong understanding of OWASP Top 10, secure design and modern application security practices
This is an excellent opportunity to join a high-impact security programme where you'll help shape secure software delivery across a large engineering organisation.
Please forward your latest CV for immediate consideration.
Rate:
£90/hour
Location:
Edinburgh
IR35 Status:
Not specified
Remote Status:
Remote
Industry:
IT
Seniority Level:
Senior