Senior DevSecOps Engineer
Betway Group2 months ago
London, United KingdomSenior
Responsibilities
- Integrate and operate SAST, DAST, SCA, secrets detection, and dependency-risk controls within CI/CD pipelines.
- Implement secure SDLC practices including branch protection, quality gates, secure build and release controls, and artifact integrity validation.
- Support threat modeling, secure design reviews, vulnerability triage, remediation, security incident investigations, and developer security enablement.
- Configure and maintain security tooling integrations across GitHub Actions, GitLab CI, Jenkins, and Azure DevOps.
- Define DevSec security standards, patterns, technical decisions, control mappings, and audit evidence.
- Identify and track DevSec-related risks and technical debt while driving remediation through process improvements.
- Implement container security across build, registry, and runtime environments.
- Collaborate with engineering, architecture, platform, operations, and information security teams to improve security outcomes.
Requirements
- Strong grounding in application security, secure coding, OWASP Top 10, API security, dependency risk, and software supply-chain security.
- Strong knowledge of SAST, DAST, SCA, CI/CD pipeline security, and developer toolchain security.
- Hands-on expertise with Docker, Kubernetes, and container security across build, registry, and runtime.
- Experience with Infrastructure as Code such as Terraform, Bicep, or CloudFormation.
- Knowledge of secrets and key management, cloud identity and access management, and ISO 27001.
- Experience operating in regulated or audited environments and supporting audits, risk assessments, or regulatory reviews.
- Ability to influence engineering teams through collaboration, technical credibility, and enablement-first security practices.
- Strong communication, organization, attention to detail, adaptability, and cross-functional collaboration skills.
- Knowledge of sports betting, online gaming or casino operations, gambling regulations, customer retention, or multinational environments is desirable.
Benefits
- Learning and development programs with training and career-growth opportunities.
- Performance management and feedback support through the company's Performance tool.
- Employee Assistance Programme for employees and their families.
- Private health care.
- Life assurance and income protection.
- Company pension.
Tech Stack
Categories