DevSecOps Engineer (Pipeline) - 12 Month Contract - Hybrid in Sheffield - Inside IR35

DevSecOps Engineer (Pipeline)- 12 Month Contract - Hybrid in Sheffield - Inside IR35 Role Overview We are looking for a DevSecOps Engineer (Pipeline Security) to join on a 12-month hybrid contract based in Sheffield. The role focuses on embedding security controls into developer workflows that use AI-generated code, including SAST integration, secrets scanning, and secure CI/CD pipeline design - driving software supply chain security across an agentic software development life cycle. Key Responsibilities Embed security controls into CI/CD pipelines for AI-generated code including SAST, secrets scanning, dependency scanning, and container scanning Implement policy-as-code guardrails and secure pipeline patterns for agentic software development life cycle environments Drive software supply chain security initiatives including SBOM generation, signed artefacts, and provenance tracking Partner with engineering teams to remediate findings and reduce time-to-fix across pipeline security vulnerabilities Contribute to the wider engineering excellence programme, promoting secure-by-design principles across developer tooling and workflows Top 5 Skills Hands-on DevSecOps experience with strong knowledge of CI/CD platforms including GitHub, GitLab, and Jenkins Proven experience integrating SAST, DAST, secrets scanning, and dependency and container scanning tools into CI/CD pipelines Experience implementing policy-as-code and infrastructure-as-code security controls within enterprise ..... full job details .....