Lead DevSecOps Engineer

🔥 13 hours ago

🇬🇧 United Kingdom – Remote

⏰ Full Time

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 15%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

CreateFuture - Design & Innovation

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💼 Consulting

📣 Marketing

Consulting • Marketing

CreateFuture - Design & Innovation is a design services company specializing in various aspects of digital and brand development. Their expertise includes marketing strategy, digital product design, consulting, innovation, proposition development, customer experience, and team enablement. They focus on helping businesses create impactful solutions that drive growth and enhance customer engagement.

📋 Description

• Drive cloud and application security across client engagements • Embed security thinking into every stage of the SDLC • Own clients’ cloud security posture and implement controls across AWS and Azure using Terraform • Drive continuous cloud security posture improvements (CSPM) • Establish application security frameworks, secure development policies, and AppSec maturity models • Perform architecture and code reviews • Deliver application and infrastructure penetration testing and automated cloud infrastructure scanning • Conduct threat modelling and provide actionable remediation guidance • Build and evolve AI-driven security tooling and platforms using Claude Code, StrandsAgent, and AWS AgentCore • Perform compliance analysis against GDPR, GLI, and PCI DSS and implement aligned controls • Present security posture, risk findings, and remediation roadmaps to executive stakeholders • Contribute to internal security best practices, standards, and governance through the Security Council • Coach and onboard DevSecOps engineers and development teams on modern security practices

🎯 Requirements

• Proven experience in a Lead or Principal DevSecOps / Application Security engineering role • Experience in iGaming, lottery, or other highly regulated digital sectors such as finance or banking • Experience with highly regulated environments, including GDPR, GLI, PCI DSS, and CFTC • CI/CD and infrastructure-as-code skills, including GitHub Actions and Terraform • Hands-on AWS and Azure security experience, including Entra ID, PIM, CAP, Defender, and Policy • Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment • Experience conducting or coordinating penetration testing and threat modelling • Experience with secure code and architecture review, ideally in regulated or high-compliance environments • Familiarity with GRC, TPRM, and SOC capabilities • Strong communication skills with the ability to influence at senior stakeholder level • Experience building AI-powered security tooling using Claude Code, StrandsAgent, AWS AgentCore, or similar agentic frameworks • Experience working in SDLC as a developer, DevOps, or cloud engineer • Azure AZ-500, SC-100, or SC-200 certificate desirable • AWS Security Specialty certification or solution architect desirable

🏖️ Benefits

• Flexible working, including hybrid and remote options • Occasional travel to client sites or CreateFuture offices when needed • Supportive and friendly culture • Investment in professional and personal growth • Clear, fair and respectful hiring process • Application adjustments or support available when needed

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume