DevSecOps Engineer - Financial Service Institution

As a DevSecOps Engineer, your main responsibilities will include:

• Drive the adoption of DevSecOps practices by integrating security checks, controls, and automation into CI/CD pipelines and software delivery workflows.
• Partner with engineering and platform teams to implement security controls across Infrastructure as Code, container platforms, Kubernetes environments, and cloud services.
• Define and maintain effective approaches for secrets management, vulnerability detection, configuration hardening, and runtime protection across development and production environments.
• Perform security design and architecture reviews for new initiatives and significant changes, providing pragmatic recommendations to reduce risk without slowing delivery.
• Evaluate security risks associated with applications, cloud infrastructure, data flows, AI-enabled components, and network exposure, and support teams in implementing proportionate mitigations.
• Contribute security expertise to incident handling activities, supporting investigation, containment, and lessons-learned improvements to tooling and processes.
• Support assurance activities such as internal reviews, external assessments, and compliance exercises, ensuring findings are addressed through engineering-led remediation.
• Continuously improve security ways of working by refining standards, guidelines, and operational playbooks aligned with evolving technologies and threats.
• Produce clear, outcome-focused security updates and risk insights for senior stakeholders and leadership.