Role Purpose
Embed security controls into the developer workflows that use Claude Code, including SAST integration on AI-generated code, secrets scanning, and secure CI/CD pipeline design.
Key Responsibilities
-
Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code.
-
Deploy and maintain secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repositories.
-
Define and enforce secure code review gates for AI-assisted development.
-
Provide developer-facing security guidance and embed security champions within engineering teams.
-
Instrument Claude Code usage for security telemetry; feed data to SIEM.
-
Support incident response for code-related security events.
Required Skills / Experience
-
5+ years in DevSecOps or application security.
-
Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins).
-
Experience with SAST, DAST, and secrets scanning tooling.
-
Application security knowledge: OWASP Top 10, secure coding practices.
-
Scripting: Python, Bash, or similar.
Desirable Skills / Experience
-
Familiarity with AI code generation tools and their security implications.
-
Experience with supply chain security (SBOM, SLSA).
-
CSSLP or equivalent certification.
DevSecOps Engineer in Sheffield employer: Wipro Europe
As a leading employer in the cryptography sector, we offer a dynamic work environment that fosters innovation and collaboration. Our commitment to employee growth is evident through continuous training opportunities and a culture that values expertise in cutting-edge technologies like HSM platforms and PKI architecture. Located in a vibrant tech hub, we provide our team with unique advantages such as access to industry-leading projects and a supportive community that encourages professional development.
