At a Glance
- Tasks: Drive secure engineering practices across cloud-based platforms and enhance security posture.
- Company: Leading financial services client in Yorkshire with a focus on innovation.
- Benefits: Competitive salary, flexible working, and opportunities for professional growth.
- Other info: Key role with excellent career advancement opportunities in a complex enterprise setting.
- Why this job: Shape secure engineering practices and make a real impact in a dynamic environment.
- Qualifications: Hands-on DevSecOps experience with strong AWS and GCP knowledge.
The predicted salary is between 60000 - 80000 £ per year.
We're partnering with a leading financial services client to appoint a DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. This role is ideal for someone who has come from a hands-on DevSecOps Engineering background and has since transitioned into architecture/design and advisory, while still retaining strong technical depth.
Key Responsibilities:
- Define and implement secure architecture patterns across engineering platforms (CI/CD, build systems, runtime environments)
- Conduct security assessments, threat modelling, and gap analysis across platforms and pipelines
- Develop and embed DevSecOps best practices, including secure pipeline design and automated controls
- Establish and enforce security baselines using policy-as-code
- Build and deliver security roadmaps, prioritising risk and regulatory requirements
- Partner with engineering and platform teams to remediate vulnerabilities and improve security posture
- Act as a trusted advisor to senior stakeholders, translating technical risks into business impact
Key Requirements:
- Proven background in hands-on DevSecOps Engineering, now operating in a design/architecture-focused role
- Strong experience across both AWS and GCP (essential)
- Deep understanding of CI/CD pipelines, build tools, artifact repositories, and developer platforms
- Expertise in secure software delivery, vulnerability management, and platform security
- Experience with threat modelling, security frameworks, and maturity assessments
- Strong knowledge of application security, network security, and cloud security principles
- Excellent stakeholder management and communication skills
Desirable:
- Experience in financial services or regulated environments
- Knowledge of Kubernetes and container security
- Familiarity with supply chain security, SBOM, and secure development practices
- Relevant certifications (eg CISSP, CISM, CCSP)
This is a key role focused on shaping and embedding secure-by-design engineering practices across a complex, enterprise environment, with strong influence across both technology and security functions. More details available on successful application.
DevSecOps Consultant. Job in Yorkshire LilyLifestyle Jobs employer: United Cerebral Palsy of Georgia
As a leading employer in the financial services sector, we offer our DevSecOps Consultants a dynamic work environment in Sheffield, where innovation meets security. Our culture prioritises collaboration and continuous learning, providing ample opportunities for professional growth through hands-on projects and mentorship. With a commitment to secure engineering practices, you will play a pivotal role in shaping the future of our cloud-based platforms while enjoying the benefits of a supportive team and a flexible work schedule.
Contact Details:
United Cerebral Palsy of Georgia Recruitment Team
StudySmarter Expert Advice🤫
We think this is how you could land DevSecOps Consultant. Job in Yorkshire LilyLifestyle Jobs
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, especially those who work in DevSecOps. A friendly chat can lead to insider info about job openings or even referrals that could give you a leg up.
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repository showcasing your DevSecOps projects. This gives potential employers a tangible look at what you can do and how you approach security challenges.
✨Tip Number 3
Prepare for interviews by brushing up on common DevSecOps scenarios. Think about how you would handle security assessments or threat modelling in real-world situations. Being ready with examples will impress your interviewers.
✨Tip Number 4
Don’t forget to apply through our website! We’ve got loads of opportunities waiting for you, and applying directly can sometimes speed up the process. Plus, it shows you’re keen on joining our team!
We think you need these skills to ace DevSecOps Consultant. Job in Yorkshire LilyLifestyle Jobs
Some tips for your application 🫡
Tailor Your CV:Make sure your CV reflects the key responsibilities and requirements from the job description. Highlight your hands-on DevSecOps experience and any relevant projects that showcase your skills in secure architecture and cloud platforms.
Craft a Compelling Cover Letter:Use your cover letter to tell us why you're the perfect fit for this role. Share specific examples of how you've implemented secure engineering practices and how you can drive security improvements in our client's environment.
Showcase Your Technical Skills:Don’t forget to mention your expertise in AWS, GCP, and CI/CD pipelines. We want to see your technical depth, so include any relevant certifications or experiences that demonstrate your knowledge in application and cloud security.
Apply Through Our Website:We encourage you to apply directly through our website for a smoother application process. This way, we can easily track your application and get back to you quicker!
How to prepare for a job interview at United Cerebral Palsy of Georgia
✨Know Your Tech Inside Out
Make sure you brush up on your hands-on DevSecOps experience, especially with AWS and GCP. Be ready to discuss specific projects where you've implemented secure architecture patterns or improved CI/CD pipelines.
✨Showcase Your Advisory Skills
Since this role involves acting as a trusted advisor, prepare examples of how you've translated technical risks into business impacts. Think about times when you've communicated complex security concepts to non-technical stakeholders.
✨Demonstrate Your Problem-Solving Abilities
Be prepared to discuss how you've conducted security assessments and threat modelling in past roles. Highlight your approach to identifying vulnerabilities and the steps you took to remediate them.
✨Familiarise Yourself with Financial Services
If you have experience in regulated environments, make sure to mention it. If not, do some research on the unique security challenges faced by financial services and be ready to discuss how you would address them.