Devsecops Engineer - Sheffield

We are looking for a DevSecOps Engineer who can secure AI-generated code - specifically code produced by Claude Code.

Location: Sheffield (2 days per week onsite)

Core of the role:

• Embed security into developer workflows around Claude Code
• Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code
• Deploy secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repos
• Define secure code review gates for AI-assisted development
• Instrument Claude Code usage for security telemetry- SIEM
• Support incident response for code-related security events
• Act as a developer-facing security champion

Must-haves:

• 5+ years DevSecOps/AppSec
• Strong CI/CD: GitHub Actions, GitLab CI, Jenkins
• SAST, DAST, secrets scanning tooling
• OWASP Top 10, secure coding
• Scripting: Python, Bash, etc.

Nice-to-haves:

• Familiarity with AI code-gen tools and their security implications
• Supply chain security (SBOM, SLSA)
• CSSLP or equivalent cert

The twist: This isn't a generic DevSecOps role - the differentiator is securing AI-generated code and building guardrails around Claude Code usage. If your CV shows standard pipeline security but nothing about AI code generation, LLM outputs, or securing AI-assisted dev workflows,