Cyber Security Consultant - DevSecOps Champion

Introduction

At IBM CIC, we provide technical and industry expertise to a wide range of public and private sector clients in the UK. A career in IBM CIC means you’ll have the opportunity to work with leading professionals across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. You will get the chance to deliver effective solutions, driving meaningful business change for our clients, using some of the latest technology platforms.

Curiosity and a constant quest for knowledge serve as the foundation to success here. You’ll be encouraged and supported to constantly reinvent yourself, focusing on skills in demand in an ever changing market. You’ll be working with diverse teams, coming up with creative solutions which impact a wide network of clients, who may be at their site or one of our CIC or IBM locations.

Our culture of evolution centres on long-term career growth and development opportunities in an environment that embraces your unique skills and experience.

• Many training opportunities from classroom to e-learning, mentoring and coaching programs and the chance to gain industry recognized certifications
• Regular and frequent promotion opportunities to ensure you can drive and develop your career with us
• Feedback and checkpoints throughout the year
• Diversity & Inclusion as an essential and authentic component of our culture through our policies and process as well as our Employee Champion teams and support networks
• A culture where your ideas for growth and innovation are always welcome
• Internal recognition programs for peer-to-peer appreciation as well as from manager to employees
• Tools and policies to support your work-life balance from flexible working approaches, sabbatical programs, paid paternity leave, maternity leave and an innovative maternity returners scheme
• More traditional benefits, such as 25 days holiday (in addition to public holidays), private medical, dental & optical cover, online shopping discounts, an Employee Assistance Program, life assurance and a group personal pension plan of an additional 5% of your base salary paid by us monthly to save for your future.

As a Dev Sec Ops  Champion at Cyber Defend, you will play a key role in helping clients embed security deeply and seamlessly into modern software delivery. This is a hands-on engineering role where you’ll work directly with development, cloud and platform teams to implement security controls, automate guardrails, and strengthen application resilience across hybrid and multicloud environments. You’ll combine technical depth, practical Dev Sec Ops  experience, and strong advisory skills to enable organisations to build secure, high-velocity engineering pipelines.

• Integrate security into every phase of the SDLC, ensuring secure-by-default development and deployment practices.
• Lead and facilitate threat modelling sessions, translating risks into clear technical requirements and design recommendations.
• Advise development teams on secure coding practices and mitigation strategies for common vulnerabilities (e.g., SQLi, XSS, SSRF, deserialization).
• Conduct and ope rationalise SAST/DAST/SCA scanning, triage findings, and guide developers through practical remediation.
• Strengthen API security through authentication, authorisation, schema validation and rate-limiting best practices.
• Implement and manage security controls for containers, Kubernetes and microservices, ensuring secure CI/CD deployment paths.
• Configure, tune and maintain WAF protections aligned to application risk profiles
• Manage application security vulnerabilities, ensuring accurate prioritisation, improved signal-to-noise, and actionable remediation plans.
• Champion Dev Sec Ops  culture by educating teams on OWASP Top 10, secure patterns, and modern application threats.
• Collaborate closely with cloud, platform, IAM and infrastructure teams to enforce aligned security guardrails across multicloud estates.

Bachelor's Degree

• Proven hands-on experience in Dev Sec Ops  and application security…