DevSecOps Engineer - Sheffield

We are looking for a DevSecOps Engineer who can secure AI-generated code - specifically code produced by Claude Code.

Location: Sheffield (2 days per week onsite)

Core of the role:

• Embed security into developer workflows around Claude Code

• Integrate SAST tools (SonarQube, Semgrep, Checkmarx) into CI/CD pipelines to scan AI-generated code

• Deploy secrets scanning (Trufflehog, GitGuardian) on Claude Code outputs and repos

• Define secure code review gates for AI-assisted development

• Instrument Claude Code usage for security telemetry - SIEM

• Support incident response for code-related security events

• Act as a developer-facing security champion

Must-haves:

• 5+ years DevSecOps/AppSec

• Strong CI/CD: GitHub Actions, GitLab CI, Jenkins

• SAST, DAST, secrets scanning tooling

• OWASP Top 10, secure coding

• Scripting: Python, Bash, etc.

Nice-to-haves:

• Familiarity with AI code-gen tools and their security implications

• Supply chain security (SBOM, SLSA)

• CSSLP or equivalent cert

The twist: This isn't a generic DevSecOps role - the differentiator is securing AI-generated code and building guardrails around Claude Code usage. If your CV shows standard pipeline security but nothing about AI code generation, LLM outputs, or securing AI-assisted dev workflows,