DevSecOps Engineer - #2181196

Cloud Security Engineer - Contract | Initial 6 Months | Remote UK

Change Digital is partnering with a leading organisation undergoing a major platform transformation and is seeking a Senior Product Security Engineer to help embed security into software delivery at scale.

This is a hands-on role focused on building secure-by-default engineering platforms, improving developer experience, and accelerating vulnerability remediation through automation rather than manual security reviews.

What You'll Be Doing

• Build secure-by-default CI/CD pipelines and reusable security components
• Embed SAST, SCA, DAST, secret scanning and IaC security checks into engineering workflows
• Improve vulnerability visibility, prioritisation and CVE remediation speed
• Partner directly with development teams to solve complex security challenges
• Facilitate threat modelling and provide secure design guidance
• Drive software supply chain security, dependency governance and secure development standards
• Define practical guardrails for AI-assisted development and AI-enabled products
• Champion a "paved road" approach where secure delivery is the easiest option for engineers

What We're Looking For

• Strong Product Security, Application Security or DevSecOps experience
• Software engineering background with Python, Java and/or TypeScript
• Experience building security into CI/CD pipelines at scale
• Strong knowledge of SAST, DAST, SCA, Secrets Scanning and IaC Security
• Experience working with GitLab, GitHub Actions or similar CI/CD platforms
• AWS, container and cloud security experience
• Strong understanding of OWASP Top 10, secure design and modern application security practices

This is an excellent opportunity to join a high-impact security programme where you'll help shape secure software delivery across a large engineering organisation. Please forward your latest CV for immediate consideration.