DevSecOps Security Consultant

Anticipated Contract End Date/Length: May 18, 2027
Work set up: Hybrid

Our client in the Information Technology and Services industry is looking for a DevSecOps Security Consultant to support the advancement of cybersecurity maturity across global engineering platforms. This role focuses on ensuring build systems, runtime infrastructure, and developer tooling are secure by design, while enabling scalable, resilient, and efficient software delivery within complex enterprise environments.

What you will do:

• Develop and maintain an engineering platform cybersecurity maturity framework to standardise assessments.
• Conduct security assessments across build systems, CI/CD pipelines, runtime infrastructure, and developer tooling.
• Perform threat modelling and gap analysis to identify vulnerabilities and systemic risks.
• Define and implement secure architecture patterns across engineering platforms.
• Establish and enforce platform security baselines using policy-as-code and automated controls.
• Collaborate with platform owners to remediate security gaps and implement scalable solutions.
• Integrate vulnerability management, SBOM, code-signing, and artifact integrity practices into engineering workflows.
• Prioritise security gaps based on risk, regulatory impact, and operational criticality.
• Develop and execute security roadmaps in collaboration with engineering and platform teams.
• Embed security best practices and DevSecOps principles into engineering platforms.
• Engage with stakeholders to translate technical risks into business impact.
• Represent cybersecurity functions in governance forums and provide updates on progress and risk posture.
• Influence and align stakeholders to drive consistent adoption of cybersecurity standards.
• Track and report cybersecurity maturity metrics and drive measurable improvements.
• Continuously evolve frameworks and practices in response to emerging threats and technologies.
• Promote a secure-by-design engineering culture through advocacy and knowledge sharing.