DevSec Engineer
Betway Group4 months ago
London, United KingdomSenior
Responsibilities
- Integrate and operate SAST, DAST, software composition analysis, secrets detection, and dependency-risk scanning within CI/CD pipelines.
- Implement secure SDLC controls including branch protection, quality gates, secure build and release controls, and artifact integrity validation.
- Assist with threat modeling and secure design reviews and support developers with vulnerability triage and remediation.
- Tune security tools, maintain their integrations across repositories and CI/CD systems, and reduce false positives and developer friction.
- Implement and maintain container security across build, registry, and runtime environments.
- Support security incident investigations involving application flaws and ensure secure, compliant defaults for development teams.
- Define DevSec security standards, patterns, decisions, control mappings, audit evidence, and risk-remediation processes.
- Collaborate with engineering and cross-functional teams through technical leadership, security enablement, and cloud-native and container-security initiatives.
Requirements
- Strong grounding in application security, secure coding, OWASP Top 10, API security, dependency risk, SAST, DAST, SCA, and software supply-chain security.
- Hands-on expertise with containers and orchestration platforms such as Docker and Kubernetes, including demonstrated container-security implementation.
- Proven experience securing CI/CD pipelines and developer toolchains.
- Knowledge of infrastructure as code tools such as Terraform, Bicep, or CloudFormation; secrets and key management; and cloud identity and access management.
- Understanding of information security frameworks such as ISO 27001 and experience operating in regulated or audited environments.
- Ability to design auditable controls without slowing delivery and influence engineering teams through collaboration and technical credibility.
- Clear communication, strong organization, attention to detail, adaptability, teamwork, and the ability to manage multiple projects.
- Preferred experience includes sports betting or online gaming, gambling regulations, customer retention strategies, multinational or multi-team operations, audits, regulatory reviews, or formal assurance activities.
Benefits
- Learning and development programs, training, and career-growth opportunities.
- Performance management and feedback through the company’s Performance tool.
- Employee Assistance Programme resources for employees and their families.
Tech Stack
Categories