Haystack
← Back to Jobs
Temporary/Casual
Engineering
HB

DevSecOps Engineer (Pipeline) - 12 Month Contract - Hybrid in Sheffield - Inside IR35

Hamilton BarnesSheffield, Yorkshire🇬🇧United KingdomPosted 24 Aug 2026

Why This Role Stands Out

You will be at the forefront of securing AI-generated code within a dynamic hybrid environment, gaining invaluable experience in cutting-edge software supply chain security. This contract offers a fantastic opportunity for a mid-senior DevSecOps Engineer with a passion for embedding security into CI/CD pipelines and policy-as-code to make a significant impact. Apply now to join a forward-thinking team and enhance your skills in a role that prioritizes secure development practices.

Quick Overview

Seniority
Mid Senior
Employment type
Temporary/Casual
Work mode
Hybrid
Location
Sheffield, Yorkshire, United Kingdom

Job Description

DevSecOps Engineer (Pipeline)- 12 Month Contract - Hybrid in Sheffield - Inside IR35

Role Overview

We are looking for a DevSecOps Engineer (Pipeline Security) to join on a 12-month hybrid contract based in Sheffield. The role focuses on embedding security controls into developer workflows that use AI-generated code, including SAST integration, secrets scanning, and secure CI/CD pipeline design - driving software supply chain security across an agentic software development life cycle.

Key Responsibilities

  • Embed security controls into CI/CD pipelines for AI-generated code including SAST, secrets scanning, dependency scanning, and container scanning
  • Implement policy-as-code guardrails and secure pipeline patterns for agentic software development life cycle environments
  • Drive software supply chain security initiatives including SBOM generation, signed artefacts, and provenance tracking
  • Partner with engineering teams to remediate findings and reduce time-to-fix across pipeline security vulnerabilities
  • Contribute to the wider engineering excellence programme, promoting secure-by-design principles across developer tooling and workflows

Top 5 Skills

  • Hands-on DevSecOps experience with strong knowledge of CI/CD platforms including GitHub, GitLab, and Jenkins
  • Proven experience integrating SAST, DAST, secrets scanning, and dependency and container scanning tools into CI/CD pipelines
  • Experience implementing policy-as-code and infrastructure-as-code security controls within enterprise engineering environments
  • Knowledge of software supply chain security practices including SBOM, signed artefacts, and provenance frameworks such as SLSA
  • Confident, client-facing professional with strong communication and collaboration skills - comfortable working across engineering and security teams in fast-paced delivery environments

Contract Details:

  • Rate: £550 per day Inside IR35
  • Location: Hybrid (2x a week) in Sheffield
  • Contract Length: 12 - Month Initial Contract

Similar jobs

Apply now