Senior DevSecOps Engineer

Security capability ownership and delivery
•    Own and deliver critical security capabilities across AI Security, Digital Assets Security, DevSecOps and Application Security, ensuring delivery is aligned to committed roadmap outcomes, OKRs and business-critical security priorities.
•    Drive security tooling integration, automation and workflow improvements across engineering platforms, with a focus on reducing manual effort, improving risk visibility and strengthening secure delivery practices.
AI Security, Digital Assets and emerging technology enablement
•    Support AI model onboarding security activities, AI governance enablement, MCP security controls, model security tooling integration and AI Factory engagement to help accelerate secure AI adoption.
•    Enable Digital Assets security outcomes by supporting security assurance for blockchain, smart contract and emerging technology use cases, including shift-left controls and early risk detection.

DevSecOps, ADO/SNC workflows and software supply chain security
•    Enhance ADO/SNC-based workflows and pipeline-integrated controls to support shift-left security, vulnerability management, issue traceability and consistent remediation across application teams.
•    Support SBOM Manager expansion, software supply chain security, SCA/OSS governance and component risk visibility to improve prioritised remediation and strengthen resilience against supply chain vulnerabilities.
Stakeholder management, governance and operationalisation
•    Engage senior stakeholders across AI Factory, ADO Platform, AI Safety, Security Architecture, Digital Assets, application and engineering teams to manage dependencies, unblock delivery issues and drive alignment on security priorities.
•    Transition successful PoVs and pilots into sustainable operating models with clear ownership, adoption plans, evidence generation, service measures and BAU handover where applicable.
•    Provide timely visibility of delivery risks, material control gaps, roadmap slippage and governance dependencies, escalating where required to protect business-critical security outcomes.