We are looking for a DevSecOps Engineer who can secure AI-generated code - specifically code produced by Claude Code.
Location: Sheffield (2 days per week onsite)
Core of the role:
Embed security into developer workflows around Claude Code
Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code
Deploy secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repos
Define secure code review gates for AI-assisted development
Instrument Claude Code usage for security telemetry - SIEM
Support incident response for code-related security events
Act as a developer-facing security champion
Must-haves:
5+ years DevSecOps/AppSec
Strong CI/CD: GitHub Actions, GitLab CI, Jenkins
SAST, DAST, secrets scanning tooling
OWASP Top 10, secure coding
Scripting: Python, Bash, etc.
Nice-to-haves:
Familiarity with AI code-gen tools and their security implications
Supply chain security (SBOM, SLSA)
CSSLP or equivalent cert
The twist: This isn't a generic DevSecOps role - the differentiator is securing AI-generated code and building guardrails around Claude Code usage. If your CV shows standard pipeline security but nothing about AI code generation, LLM outputs, or securing AI-assisted dev workflows,
...
DevSecOps Engineer - Sheffield employer: iBSC
As a Guidewire Architect at our company, you will be part of a dynamic team driving significant transformation in the P&C insurance sector. We pride ourselves on fostering a collaborative work culture that values innovation and professional growth, offering opportunities for continuous learning and development in a hybrid work environment. Located in London, we provide a unique blend of flexibility and access to a vibrant city life, making us an excellent employer for those seeking meaningful and rewarding careers.
