Senior DevSecOps Engineer

This is a fully remote position, open to applicants in United Kingdom.

📋 Description

• Collaborate with stakeholders to recognize security improvements across platform architecture and infrastructure.

• Develop and implement strategic plans for security enhancement.

• Partner with the Platform team to integrate security processes, controls, and tools throughout system components.

• Conduct threat modeling for new and existing systems, including AI/LLM-enabled features and agentic workflows.

• Convert threat-model findings into prioritized, actionable tasks.

• Enhance the software supply chain through proper management of dependencies and base-image hygiene, SBOM creation, artifact signing and provenance, and securing third-party actions and packages.

• Ensure secure AI utilization throughout the SDLC, including agentic coding tools, assistants, and MCP integrations.

• Contribute to the evolution of deployment frameworks with a focus on security, deployment speed, and system reliability.

• Boost platform security through effective secrets management and careful handling of sensitive information.

• Engage in incident response, resolution, and blameless post-mortem analysis.

• Promote continuous improvement initiatives.

• Participate in technical discussions and team-based learning sessions.

• Keep current playbooks, runbooks, and comprehensive systems documentation up to date.

⛳️ Requirements

• Extensive experience in cybersecurity and related engineering disciplines.

• Background in vulnerability management and remediation on a large scale.

• Demonstrated DevOps / DevSecOps engineering experience with large-scale platforms.

• Strong proficiency in distributed cloud systems, especially Amazon Web Services.

• Expertise in Infrastructure as Code tools such as Terraform and CloudFormation.

• Familiarity with programming languages including PHP, Bash, or Python.

• Experience with Docker and containerization, including security aspects of containers and runtimes.

• Knowledge of software supply chain security, encompassing SBOMs, dependency scanning, and artifact signing/provenance.

• Experience with secrets management and detection tools, such as Vault, cloud-native secret stores, and secret scanning in CI.

• Familiarity with SDLC security tools, including SAST, DAST, SCA, IaC scanning, and container scanning.

• Experience implementing policy-as-code and guardrails, such as OPA / Conftest, with an identity-centric/zero-trust methodology.

• Understanding of monitoring and detection tools such as DataDog and Prometheus.

• Proactive problem-solving mindset along with strong teamwork and communication skills.

• Exceptional command of written and spoken English.

• Practical knowledge of AI/LLM security risks and mitigation strategies.

• Experience securing AI-assisted and agentic development tools.

• Familiarity with AI threat modeling, adversarial techniques like MITRE ATLAS, and AI-aware red teaming.

• Awareness of AI governance and assurance frameworks such as NIST AI RMF and ISO/IEC 42001.

• Confident and responsible use of AI tools in security-related tasks.

• Bonus: experience with large-scale enterprise solutions, kanban and agile processes, software best practices, EdTech compliance frameworks, and relevant certifications such as AWS Security Specialty, OSCP, or AI security/governance credentials.

• Must be eligible to work without visa sponsorship; Arbor Education cannot provide visa sponsorship.

🏝️ Benefits

• Dedicated wellbeing team and initiatives including mindfulness, lunch and learns, manager training, and mental health first aid training.

• 32 days of holiday plus Bank Holidays.

• Life Assurance provided at 3x annual salary.

• Comprehensive AIG Smart Health wellness benefit featuring a 24/7 virtual GP, mental health support, counseling, and personalized health checks.

• Private Dental Insurance through Bupa.

• Salary sacrifice pension managed by Scottish Widows.

• Enhanced maternity and adoption leave (20 weeks full pay) and paternity leave (6 weeks full pay).

• Five complimentary return-to-work maternity coaching sessions.

• Access to Calm and Bippit financial wellbeing coaching.

• Flexible working arrangements.

• Social committees and various team, office, and company-wide events.

• Allocated professional development training budget, including CPD courses, upskilling resources, and professional memberships.

• One paid volunteer day each year.

• Dog-friendly office environment.

• Referral voucher valued up to £200.