DevSecOps Engineer

About the role

Collinson is looking for a DevSecOps Engineer to embed security throughout the software development lifecycle. You will shape a resilient, security‑first platform, driving automation, shift‑left practices and innovative AI‑enabled security approaches.

Key responsibilities

• Define and own the technical security strategy for the platform, applying AWS Well‑Architected Framework, zero‑trust principles, least‑privilege access and disaster‑recovery design.
• Champion shift‑left security by integrating static and dynamic security testing, vulnerability management and remediation into CI/CD pipelines.
• Implement security‑as‑code, automate controls, and continuously improve the security posture and compliance of the platform.
• Collaborate with development, operations and product teams to embed security best practices and act as the primary technical security authority.

Required profile

• Hands‑on experience building secure‑by‑design systems in cloud environments.
• Proven ability to lead security strategy, drive automation and influence cross‑functional teams.
• Passion for innovative security solutions, including AI‑enhanced approaches.

Required skills

• AWS (including Well‑Architected Framework)
• Zero‑trust architecture
• Least‑privilege access control
• Disaster‑recovery planning
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Vulnerability management and remediation
• Security automation and security‑as‑code
• CI/CD pipeline integration