DevSecOps Engineer

We're looking for a hands‑on Dev Sec Ops  Engineer to take ownership of application and cloud security across a modern, Azure‑first product environment. This is a product‑focused security role, sitting at the intersection of development, Dev Ops and security, helping teams understand why vulnerabilities exist and how to fix them properly.

The foundations are already strong, with regular external penetration testing, positive audit outcomes, and mature security tooling in place. Your role is to raise the bar further, embedding security deeper into how products are built, configured and deployed.

You’ll be the subject matter owner for Dev Sec Ops , working closely with developers, Dev Ops and product teams to improve security posture through insight, automation and education.

• Act as the Dev Sec Ops  lead, owning application and cloud security practices across the business
• Analyse outputs from SAST and DAST tools (e.g. Snyk, Bright Sec), understanding vulnerabilities at a low level and advising development teams on remediation
• Work closely with Dev Ops to ensure secure configuration and deployment within Azure (including Azure Front Door, WAF, Defender for Cloud, Sentinel)
• Support and interpret results from ITHC (UK Government-standard) penetration tests, ensuring findings are understood and remediated across product and platform teams
• Embed security controls and testing into CI/CD pipelines, improving automation and consistency
• Help educate and uplift Dev Ops and engineering teams on secure practices where needed
• Collaborate with external security partners, audits and penetration testing providers
• Investigate and support resolution of security issues raised via customers or automated alerts
• Provide security input into customer discussions alongside sales and consultancy teams

• Comfortable operating as a solo SME, owning the subject, partnering with the business and third parties
• Experienced with working in a software house and product‑led environment
• Strong background and understanding of Azure
• Ability to share knowledge and educate the wider team on best practices
• Ideally with a background who has tight security principles

Glasgow based office, hybrid working with minimum 2x office days per week.

Salary £60,000 - £65,000 + benefits

Permanent opportunity

Full UK right to work required as successful candidate will be taken through clearance checking.