SECURITY ARCHITECT L1(CONTRACT)

Job Description

Sheffield

DevSecOps Engineer

Role Purpose

Embed security controls into the developer workflows that use Claude Code, including SAST integration on AI-generated code, secrets scanning, and secure CI/CD pipeline design.

Key Responsibilities

Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code.
Deploy and maintain secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repositories.
Define and enforce secure code review gates for AI-assisted development.
Provide developer-facing security guidance and embed security champions within engineering teams.
Instrument Claude Code usage for security telemetry; feed data to SIEM.
Support incident response for code-related security events.

Required Skills / Experience

5+ years in DevSecOps or application security.
Strong CI/CD pipeline experience (GitHub Actions, GitLab CI, Jenkins).
Experience with SAST, DAST, and secrets scanning tooling.
Application security knowledge: OWASP Top 10, secure coding practices.
Scripting: Python, Bash, or similar.

Desirable Skills / Experience

Familiarity with AI code generation tools and their security implications.
Experience with supply chain security (SBOM, SLSA).
CSSLP or equivalent certification.

͏

Deliver

No	Performance Parameter	Measure
1	Customer centricity	Timely security breach solutioning to end users, Internal stakeholders & external customers experience, CSAT, educating and suggesting right control to the customers.
2	Support sales team to create wins	% of proposals with Quality Index >7, timely support of the proposals, identifying opportunities/ leads to sell services within/ outside account (lead generation), no. of proposals led