Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 13 hours ago

Senior DevSecOps Engineer Contract

CreateFuture44 open roles

Where
United Kingdom
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior DevSecOps Engineer ContractCreateFuture · United Kingdom

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on CreateFuture's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.8% of postings close within 7 days. Measured by our own scanner across the market. CreateFuture postings stay open a median of 16 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.5%3 days
  3. 12.8%7 days
  4. 20.6%14 days
  5. 35.6%30 days
  6. 58.4%60 days
This job: posted 13 hours ago

CreateFuture median: 16 days open

The posting

Working at CreateFuture

CreateFuture is an AI-native consulting partner where people do work that matters and are supported to do it well. We work alongside organisations such as PayPal, adidas, NatWest, FanDuel and Money Saving Expert, building digital products and services that make a difference while always putting people first.

We’re a team of creators. We write code, shape delivery, build go-to-market strategies, develop AI solutions and create the practices that support our people. We work side by side with our clients, challenging what’s not working and helping them to build the future. Our commitment to craft, quality, and culture has helped us scale to over 600 people in just a few years.

Our UK Benefits

  • 35 days leave (including bank holidays).
  • Private medical insurance.
  • Enhanced parental and adoption leave.
  • Financial coaching + 5% pension match.
  • 40 hours of paid learning and development.

View our full list of UK benefits.

CreateFuture is a Great Place to Work-Certified™ company and has won Best Workplaces UK multiple years in a row.

Join us on our journey. Let’s create tomorrow, together, today.

We are looking for an experienced senior DevSecOps Engineer to join our growing Security practice. In this role you will drive Platform and application security across client engagements — embedding security thinking into every stage of the SDLC, mentoring engineers, and helping CreateFuture build world-class DevSecOps capabilities.

Our clients span regulated and high-stakes industries including iGaming, healthcare-tech, e-commerce, and financial services. You will work hands-on with these clients — conducting threat modelling, secure architecture reviews, and penetration testing — while also shaping the internal AI-powered security tooling that sets CreateFuture apart.

Key Responsibilities

  • Cloud Security – Design and implement security controls across Azure using Terraform (including Azure Entra ID, PIM, CAP, Policy Defender, and Sentinel).
  • Application Security – Incident Response plans, design and implement SAST, DAST, IaC, Container scans with industry-standard tools and deal with common issues such as False Positive rates.
  • Threat Modelling & Secure Design – Lead threat modelling sessions and carry out secure architecture and code reviews on client engagements, including within regulated iGaming environments.
  • Penetration Testing – Perform white-boxed application and infrastructure pentesting across client projects, identifying vulnerabilities and delivering clear, actionable remediation guidance.
  • Security Incident Handling – Assist with and senior security incident response activities, coordinating across engineering teams and senior stakeholders to contain, investigate, and remediate incidents effectively.
  • Vulnerability Remediation & Validation – Conduct impact analysis and drive end-to-end remediation for application and infrastructure findings—including firewall configurations, system patching, and Entra ID administrative controls—while executing retesting and coordinating cross-functional regression testing to ensure seamless operational continuity.
  • AI-Powered Security Tooling – Build and evolve AI-driven security tooling using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore (or Azure equivalent) — automating security workflows and increasing coverage at scale.
  • Compliance & Governance – Perform compliance analysis, identify security requirements, and implement controls aligned to regulatory standards on client projects.
  • Mentoring & Onboarding – Coach and onboard DevSecOps engineers, and development teams on modern security practices.
  • Stakeholder Communication – Present security posture, risk findings, and remediation roadmaps clearly to senior stakeholders.

What we're looking for

Essential

  • Production experience operating in a multi-region Azure environment
  • Proven experience in a senior DevSecOps / Application Security engineering role
  • Proven experience working in SDLC as Dev, Quality engineer or DevOps
  • Proven experience working in a consulting setting and mindset
  • Strong infrastructure-as-code skills, particularly Terraform
  • Azure security experience (Entra ID, PIM, CAP, Policy, Defender, Sentinel)
  • Practical experience with CI/CD security integration (Azure DevOps, GitHub Actions)
  • Deep knowledge of OWASP frameworks, secure SDLC, and application security assessment
  • Experience conducting or coordinating penetration testing and threat modelling
  • Experience with secure code and architecture review, ideally in regulated or high-compliance environments such as iGaming, fintech, or healthcare
  • Hands-on involvement in security incident response and handling
  • Familiar with how the infosec team operates, including GRC, TPRM and SOC capability.
  • Familiar with common SIEM and SOAR platforms, their workflows and underlying data structure.
  • Strong communication skills
  • Experience with compliance and regulatory analysis (GDPR, PCI DSS, or similar)

Desirable

  • Experience building AI-powered security tooling using Claude Code, StrandsAgent, AWS AgentCore, or similar agentic frameworks
  • Experience in iGaming, lottery, or other highly regulated digital sectors

Tech Stack Azure | Terraform | GitHub Actions | Azure DevOps | JavaScript | C# | Java | .NET | React Native | Node.js | Claude Code | OWASP ZAP | Burp Suite | Sentinel | Defender

What we’ll offer you:

We trust people to do their best work. That means flexibility over rigid rules, impact over activity, and real investment in your growth both professionally and personally. You’ll be part of a supportive, and friendly culture, surrounded by smart, curious people who care deeply about what they do.

We offer flexible working, including hybrid and remote options. Our office hubs are located in Edinburgh, Leeds, Manchester, London and Bulgaria, with occasional travel to client sites or CreateFuture offices when needed.

We trust you to manage your time balancing collaboration with client time and focused work. What matters is the impact you have, not how busy you look.

Our hiring process

We try to keep our hiring process clear, fair and respectful of your time. We aim to get back to everyone who applies and we will be upfront about where you are in the process.

It usually looks like this:

  • Call with our Talent Acquisition Team
  • Role specific capability interview

Depending on the role, we might also ask you to do a short presentation, a practical or technical task or have a values focused conversation. We will explain what is involved before anything happens.

Inclusion at CreateFuture

We believe diverse teams build better workplaces and better products. We want CreateFuture to be a place where people feel able to be themselves and do their best work.

If you need any adjustments or support during the application process, just. We will do what we can to help.

We look forward to your application!

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against CreateFuture's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on CreateFuture's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    CreateFuture's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.