Lead DevSecOps Engineer

Posted 53mins ago

Employment Information

Education
Salary
Experience
Job Type

Report this job

Job expired or something wrong with this job?

Job Description

Lead DevSecOps Engineer securing cloud platforms and applications for CreateFuture’s regulated-industry consulting clients. Building AI-powered security tooling and mentoring engineering teams.

Responsibilities:

  • Drive cloud and application security across client engagements
  • Embed security thinking into every stage of the SDLC
  • Own clients’ cloud security posture and implement controls across AWS and Azure using Terraform
  • Drive continuous cloud security posture improvements (CSPM)
  • Establish application security frameworks, secure development policies, and AppSec maturity models
  • Perform architecture and code reviews
  • Deliver application and infrastructure penetration testing and automated cloud infrastructure scanning
  • Conduct threat modelling and provide actionable remediation guidance
  • Build and evolve AI-driven security tooling and platforms using Claude Code, StrandsAgent, and AWS AgentCore
  • Perform compliance analysis against GDPR, GLI, and PCI DSS and implement aligned controls
  • Present security posture, risk findings, and remediation roadmaps to executive stakeholders
  • Contribute to internal security best practices, standards, and governance through the Security Council
  • Coach and onboard DevSecOps engineers and development teams on modern security practices

Requirements:

  • Proven experience in a Lead or Principal DevSecOps / Application Security engineering role
  • Experience in iGaming, lottery, or other highly regulated digital sectors such as finance or banking
  • Experience with highly regulated environments, including GDPR, GLI, PCI DSS, and CFTC
  • CI/CD and infrastructure-as-code skills, including GitHub Actions and Terraform
  • Hands-on AWS and Azure security experience, including Entra ID, PIM, CAP, Defender, and Policy
  • Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment
  • Experience conducting or coordinating penetration testing and threat modelling
  • Experience with secure code and architecture review, ideally in regulated or high-compliance environments
  • Familiarity with GRC, TPRM, and SOC capabilities
  • Strong communication skills with the ability to influence at senior stakeholder level
  • Experience building AI-powered security tooling using Claude Code, StrandsAgent, AWS AgentCore, or similar agentic frameworks
  • Experience working in SDLC as a developer, DevOps, or cloud engineer
  • Azure AZ-500, SC-100, or SC-200 certificate desirable
  • AWS Security Specialty certification or solution architect desirable

Benefits:

  • Flexible working, including hybrid and remote options
  • Occasional travel to client sites or CreateFuture offices when needed
  • Supportive and friendly culture
  • Investment in professional and personal growth
  • Clear, fair and respectful hiring process
  • Application adjustments or support available when needed