DevSecOps Consultant - 12 Month Contract - Hybrid in Sheffield - Inside IR35

DevSecOps Consultant - 12 Month Contract - Hybrid in Sheffield - Inside IR35 Role Overview We are looking for a DevSecOps Consultant to join on a 12-month hybrid contract based in Sheffield, starting September 2026. The role sits within an Engineering Excellence and Enablement team, working across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity - ensuring build systems, CI/CD pipelines, runtime infrastructure, and developer tooling are secure by design within a leading financial services institution. Key Responsibilities Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework, conducting comprehensive platform security reviews across CI/CD pipelines, build systems, runtime infrastructure, and developer tooling Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks across source code, artefacts, and workloads, and establishing standardised secure architecture and engineering patterns Define and enforce platform security baselines using policy-as-code and automated controls, integrating vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows Partner with platform owners to remediate critical gaps and build actionable security roadmaps, balancing quick wins with long-term strategic improvements aligned to business risk and regulatory impact Serve as a trusted advisor to senior technology stakeholders and Cyber leadership, ..... full job details .....