{"id":3517527,"url":"https://alion.io/job/createfuture-senior-devsecops-engineer-contract","title":"Senior DevSecOps Engineer Contract","company":{"id":52267,"name":"CreateFuture","domain":"createfuture.com","url":"https://alion.io/company/createfuture","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":88,"open_postings":8,"ghost_share":0,"stale_share":0.5,"repost_share":0,"time_to_fill_p50_days":40,"computed_at":"2026-11-04T06:34:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"contractor","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":79000,"max_usd":145000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"AWS Bedrock AgentCore","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"GDPR","optional":false},{"name":"GitHub Actions","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"Terraform","optional":false},{"name":"AI Agents","optional":true},{"name":"C#","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"OWASP ZAP","optional":true},{"name":"React Native","optional":true},{"name":"React.js","optional":true}],"status":"live","first_seen_at":"2026-10-30T08:15:52Z","employer_posted_date":"2026-10-30","last_verified_at":"2026-11-04T04:34:53Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"Working at CreateFuture\n\nCreateFuture is an AI-native consulting partner where people do work that matters and are supported to do it well. We work alongside organisations such as PayPal, adidas, NatWest, FanDuel and Money Saving Expert, building digital products and services that make a difference while always putting people first.\nWe’re a team of creators. We write code, shape delivery, build go-to-market strategies, develop AI solutions and create the practices that support our people. We work side by side with our clients, challenging what’s not working and helping them to build the future. Our commitment to craft, quality, and culture has helped us scale to over 600 people in just a few years.\nOur UK Benefits \n35 days leave (including bank holidays). \nPrivate medical insurance.\nEnhanced parental and adoption leave. \nFinancial coaching + 5% pension match.\n40 hours of paid learning and development.\n View our full list of UK benefits. \n CreateFuture is aGreat Place to Work-Certified™ company and has won Best Workplaces UK multiple years in a row.\nJoin us on our journey. Let’s create tomorrow, together, today.\nWe are looking for an experienced senior DevSecOps Engineer to join our growing Security practice. In this role you will drive Platform and application security across client engagements - embedding security thinking into every stage of the SDLC, mentoring engineers, and helping CreateFuture build world-class DevSecOps capabilities.\nOur clients span regulated and high-stakes industries including iGaming, healthcare-tech, e-commerce, and financial services. You will work hands-on with these clients - conducting threat modelling, secure architecture reviews, and penetration testing - while also shaping the internal AI-powered security tooling that sets CreateFuture apart.\nKey Responsibilities\n\nCloud Security - Design and implement security controls across Azure using Terraform (including Azure Entra ID, PIM, CAP, Policy Defender, and Sentinel).\nApplication Security - Incident Response plans, design and implement SAST, DAST, IaC, Container scans with industry-standard tools and deal with common issues such as False Positive rates. \nThreat Modelling & Secure Design - Lead threat modelling sessions and carry out secure architecture and code reviews on client engagements, including within regulated iGaming environments.\nPenetration Testing - Perform white-boxed application and infrastructure pentesting across client projects, identifying vulnerabilities and delivering clear, actionable remediation guidance.\nSecurity Incident Handling - Assist with and senior security incident response activities, coordinating across engineering teams and senior stakeholders to contain, investigate, and remediate incidents effectively.\nVulnerability Remediation & Validation - Conduct impact analysis and drive end-to-end remediation for application and infrastructure findings-including firewall configurations, system patching, and Entra ID administrative controls-while executing retesting and coordinating cross-functional regression testing to ensure seamless operational continuity.\nAI-Powered Security Tooling - Build and evolve AI-driven security tooling using Claude Code skills, hosted agents via StrandsAgent, and AWS AgentCore (or Azure equivalent) - automating security workflows and increasing coverage at scale.\nCompliance & Governance - Perform compliance analysis, identify security requirements, and implement controls aligned to regulatory standards on client projects.\nMentoring & Onboarding - Coach and onboard DevSecOps engineers, and development teams on modern security practices.\nStakeholder Communication - Present security posture, risk findings, and remediation roadmaps clearly to senior stakeholders.\nWhat we're looking for\n\nEssential\nProduction experience operating in a multi-region Azure environment\nProven experience in a senior DevSecOps / Application Security engineering role\nProven experience working in SDLC as Dev, Quality engineer or DevOps\nProven experience working in a consulting setting and mindset\nStrong infrastructure-as-code skills, particularly Terraform\nAzure security experience (Entra ID, PIM, CAP, Policy, Defender, Sentinel)\nPractical experience with CI/CD security integration (Azure DevOps, GitHub Actions)\nDeep knowledge of OWASP frameworks, secure SDLC, and application security assessment\nExperience conducting or coordinating penetration testing and threat modelling\nExperience with secure code and architecture review, ideally in regulated or high-compliance environments such as iGaming, fintech, or healthcare\nHands-on involvement in security incident response and handling\nFamiliar with how the infosec team operates, including GRC, TPRM and SOC capability.\nFamiliar with common SIEM and SOAR platforms, their workflows and underlying data structure.\nStrong communication skills\nExperience with compliance and regulatory analysis (GDPR, PCI DSS, or similar)\nDesirable\nExperience building AI-powered security tooling using Claude Code, StrandsAgent, AWS AgentCore, or similar agentic frameworks\nExperience in iGaming, lottery, or other highly regulated digital sectors\nTech Stack\n Azure | Terraform | GitHub Actions | Azure DevOps | JavaScript | C# | Java | .NET | React Native | Node.js | Claude Code | OWASP ZAP | Burp Suite | Sentinel | Defender\nWhat we’ll offer you:\nWe trust people to do their best work. That means flexibility over rigid rules, impact over activity, and real investment in your growth both professionally and personally. You’ll be part of a supportive, and friendly culture, surrounded by smart, curious people who care deeply about what they do.\nWe offer flexible working, including hybrid and remote options. Our office hubs are located in Edinburgh, Leeds, Manchester, London and Bulgaria, with occasional travel to client sites or CreateFuture offices when needed.\nWe trust you to manage your time balancing collaboration with client time and focused work. What matters is the impact you have, not how busy you look.\nOur hiring process\nWe try to keep our hiring process clear, fair and respectful of your time. We aim to get back to everyone who applies and we will be upfront about where you are in the process.\nIt usually looks like this:\nCall with our Talent Acquisition Team \nRole specific capability interview \nDepending on the role, we might also ask you to do a short presentation, a practical or technical task or have a values focused conversation. We will explain what is involved before anything happens.\nInclusion at CreateFuture \nWe believe diverse teams build better workplaces and better products. We want CreateFuture to be a place where people feel able to be themselves and do their best work.\nIf you need any adjustments or support during the application process, just. We will do what we can to help.\nWe look forward to your application!","description_format":"text","description_chars":6881,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Health insurance"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Consulting & Digital Transformation","Custom Software Development","AI Consulting & Integration"],"lifecycle":[{"event":"open","at":"2026-10-30T10:59:18Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":4,"expected_fill_days":40,"reasons":["conf:1","velocity","win:early"],"computed_at":"2026-11-04T06:34:25Z"},"pay":null,"html_url":"https://alion.io/job/createfuture-senior-devsecops-engineer-contract","json_url":"https://alion.io/job/createfuture-senior-devsecops-engineer-contract.json","meta":{"generated_at":"2026-11-04T07:09:13Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11186,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-05T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":52267},"rest":"https://alion.io/mcp/rest/get_company?id=52267"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcreatefuture-senior-devsecops-engineer-contract"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcreatefuture-senior-devsecops-engineer-contract"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcreatefuture-senior-devsecops-engineer-contract"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/createfuture-senior-devsecops-engineer-contract\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcreatefuture-senior-devsecops-engineer-contract"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3517527}},{"tool":"search_jobs","arguments":{"company":"createfuture.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3517527},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}