Lead DevSecOps Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Lead cloud and application security initiatives throughout client engagements

• Integrate security considerations into each phase of the Software Development Life Cycle (SDLC)

• Manage clients’ cloud security posture and implement controls across AWS and Azure utilizing Terraform

• Promote ongoing enhancements to cloud security posture management (CSPM)

• Develop application security frameworks, secure development policies, and AppSec maturity models

• Conduct architecture and code assessments

• Provide application and infrastructure penetration testing along with automated cloud infrastructure scanning

• Execute threat modeling and deliver actionable remediation recommendations

• Create and enhance AI-driven security tools and platforms using Claude Code, StrandsAgent, and AWS AgentCore

• Conduct compliance assessments against GDPR, GLI, and PCI DSS, implementing necessary controls

• Present security posture, risk assessments, and remediation strategies to executive stakeholders

• Contribute to the development of internal security best practices, standards, and governance through participation in the Security Council

• Mentor and onboard DevSecOps engineers and development teams on contemporary security practices

⛳️ Requirements

• Demonstrated experience in a Lead or Principal DevSecOps / Application Security engineering position

• Background in iGaming, lottery, or other highly regulated digital sectors such as finance or banking

• Experience in highly regulated environments, including GDPR, GLI, PCI DSS, and CFTC

• Proficiency in CI/CD and infrastructure-as-code practices, including GitHub Actions and Terraform

• Practical experience with AWS and Azure security, encompassing Entra ID, PIM, CAP, Defender, and Policy

• In-depth understanding of OWASP frameworks, secure SDLC, and application security evaluations

• Experience in conducting or coordinating penetration testing and threat modeling

• Familiarity with secure code and architecture reviews, ideally in regulated or high-compliance settings

• Knowledge of GRC, TPRM, and SOC capabilities

• Excellent communication skills with the ability to influence senior stakeholders

• Experience in developing AI-powered security tools using Claude Code, StrandsAgent, AWS AgentCore, or similar frameworks

• Background working in SDLC as a developer, DevOps, or cloud engineer

• Azure AZ-500, SC-100, or SC-200 certifications are desirable

• AWS Security Specialty certification or solution architect certification is a plus

🏝️ Benefits

• Flexible working arrangements, including hybrid and remote options

• Occasional travel to client sites or CreateFuture offices as necessary

• Supportive and friendly work culture

• Commitment to professional and personal development

• Transparent, fair, and respectful hiring process

• Assistance with application adjustments or support available as needed