At a Glance
- Tasks: Lead cloud and application security, mentor engineers, and enhance DevSecOps capabilities.
- Company: Join CreateFuture, an AI-native consulting partner with a people-first culture.
- Benefits: Flexible working options, supportive culture, and investment in your personal and professional growth.
- Other info: Great Place to Work-Certified™ with excellent career growth opportunities.
- Why this job: Make a real impact in high-stakes industries while working with cutting-edge technology.
- Qualifications: Experience in DevSecOps, cloud security, and regulated environments like finance or healthcare.
The predicted salary is between 63000 - 77000 £ per year.
Working at CreateFuture is an AI-native consulting partner where people do work that matters and are supported to do it well. We work alongside organisations such as PayPal, adidas, NatWest, FanDuel and Money Saving Expert, building digital products and services that make a difference while always putting people first. We’re a team of creators. We write code, shape delivery, build go-to-market strategies, develop AI solutions and create the practices that support our people. Our commitment to craft, quality, and culture has helped us scale to over 600 people in just a few years. CreateFuture is a Great Place to Work-Certified™ company and has won Best Workplaces UK multiple years in a row. Join us on our journey. Let’s create tomorrow, together, today.
About the role and team:
We are looking for an experienced Lead DevSecOps Engineer to join our growing Security practice. In this role you will drive cloud and application security across client engagements — embedding security thinking into every stage of the SDLC, platform building, mentoring engineers, and helping CreateFuture build world-class DevSecOps capabilities. Our clients span regulated and high-stakes industries including iGaming, healthcare-tech, e-commerce, and financial services. You will work hands‑on with these clients — conducting threat modelling, secure architecture reviews, and penetration testing — while also shaping the internal AI‑powered security tooling that sets CreateFuture apart.
What you'll be doing:
- Cloud Security – Own the cloud security posture for clients, designing and implementing security controls across AWS and Azure using Terraform while driving continuous posture improvements.
- Application Security – Own the application security posture for clients, establishing frameworks covering secure development policy and AppSec Maturity Models while performing architecture and code reviews.
- Security Assessment – Deliver security assessments across client projects, incorporating application and infrastructure penetration testing, automated cloud infrastructure scanning, and in-depth reviews of architecture and source code security.
- AI‑Powered Security Tooling and Platform – Build and evolve AI‑driven security tooling and platform using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore.
- Compliance & Governance – Perform compliance analysis against regulations such as GDPR, GLI and PCI DS, identify security requirements, and implement controls aligned to regulatory standards.
- Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps to executive stakeholders.
- Internal Security & Best Practices – Contribute to the enhancement of security best practices throughout CreateFuture.
- Mentoring & Onboarding – Coach and onboard DevSecOps engineers and development teams on modern security practices.
What you bring:
- Proven experience in a Lead or Principal DevSecOps / Application Security engineering role.
- Experience in iGaming, lottery, or other highly regulated digital sectors such as finance, banking.
- Experience with highly regulated environments (GDPR, GLI, PCI DSS, CFTC).
- Experience with CI/CD, infrastructure‑as‑code skills such as GitHub actions and Terraform.
- Hands‑on AWS security experience and Azure security experience.
- Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment.
- Experience conducting or coordinating penetration testing and threat modelling.
- Experience with secure code and architecture review.
- Strong communication skills with the ability to influence at senior stakeholder level.
- Experience building AI‑powered security tooling.
- AWS Security Specialty certification or solution architect.
What we’ll offer you:
We trust people to do their best work. That means flexibility over rigid rules, impact over activity, and real investment in your growth both professionally and personally. You’ll be part of a supportive, and friendly culture, surrounded by smart, curious people who care deeply about what they do. We offer flexible working, including hybrid and remote options.
Our hiring process:
We try to keep our hiring process clear, fair and respectful of your time. We aim to get back to everyone who applies and we will be upfront about where you are in the process.
Inclusion at CreateFuture:
We believe diverse teams build better workplaces and better products. We want CreateFuture to be a place where people feel able to be themselves and do their best work. If you need any adjustments or support during the application process, just let us know. We will do what we can to help. We look forward to your application!
Lead DevSecOps Engineer in London employer: CreateFuture
At CreateFuture, we pride ourselves on being an exceptional employer that fosters innovation and collaboration in the rapidly evolving field of AI. Our vibrant work culture encourages continuous learning and professional growth, offering employees the chance to work on cutting-edge projects while enjoying a supportive environment. Located in a dynamic tech hub, we provide unique opportunities for networking and career advancement, making us an ideal choice for those seeking meaningful and rewarding employment.
StudySmarter Expert Advice🤫
We think this is how you could land Lead DevSecOps Engineer in London
✨Join Local Tech Meetups
Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at CreateFuture or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!
✨Contribute to Open Source Projects
Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to CreateFuture.
✨Tap into Online Developer Communities
Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like CreateFuture.
✨Explore Job Boards Specifically for Tech Roles
Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like CreateFuture that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!
We think you need these skills to ace Lead DevSecOps Engineer in London
Some tips for your application 🫡
Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.
Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at CreateFuture.
Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at CreateFuture and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!
Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!
How to prepare for a job interview at CreateFuture
✨Brush Up on Your Coding Skills
For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.
✨Know Your Tools and Frameworks
Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If CreateFuture uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.
✨Showcase Your Projects
Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.
✨Prepare for Behavioural Questions
While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.
