DevSecOps Capability Manager

DevSecOps Capability Manager

Location: Skipton (Hybrid)

Salary: Competitive + Excellent Benefits

Are you passionate about driving secure, high-performing software delivery at scale? This is a fantastic opportunity to lead and evolve a DevSecOps capability within a forward-thinking organisation, enabling fast, safe, and compliant delivery across multiple engineering teams.

The Role

As the DevSecOps Capability Manager, youll lead and scale DevSecOps practices across the organisation, embedding secure-by-design principles, modern automation, and policy-as-code into the CI/CD ecosystem.

Youll play a pivotal role in improving engineering performance, focusing on DORA metrics such as lead time, deployment frequency, and reliability. This role blends technical leadership, strategy, governance, and hands-on capability development.

What Youll Do

Value, Flow & Quality

\n
• Own and improve lead time and deployment frequency across platforms
\n
• Publish and act on DORA and flow metrics
\n
• Remove bottlenecks through automation and policy-as-code
\n
• Implement modern deployment strategies (canary, blue/green, auto rollback)
\n
• Drive performance improvements via engineering scorecards
\n

Leadership & Capability Development

\n
• Lead, coach, and develop a team of DevSecOps Engineers
\n
• Define standards, patterns, and best practices
\n
• Foster a culture of security, automation, and continuous improvement
\n

Strategy, Governance & Technical Direction

\n
• Set DevSecOps strategy across pipelines and security automation
\n
• Establish governance for CI/CD, IaC, and cloud delivery
\n
• Define observability standards (SLOs, tracing, dashboards)
\n
• Embed security into pipelines (SAST, SCA, DAST, secrets, IaC scanning)
\n
• Govern \"Golden Path\" templates and adoption
\n

Operational Oversight & Risk Management

\n
• Oversee reliability, performance, and security of platforms and pipelines
\n
• Lead vulnerability management and remediation
\n
• Support incident response and post-incident reviews
\n
• Integrate telemetry across Azure ecosystem (Defender, Entra, WAF)
\n

Collaboration Across Technology

\n
• Act as a senior advisor to engineering, product, and security teams
\n
• Align stakeholders on delivery and security best practice
\n
• Represent DevSecOps in governance forums
\n

Tooling, Automation & Optimisation

\n
• Own DevSecOps tooling strategy and lifecycle
\n
• Drive automation across testing, security, deployment, and monitoring
\n
• Partner with Cloud and Platform teams
\n
• Own and evolve the Golden Path service catalogue
\n

Business Continuity & Resilience

\n
• Embed resilience and BCP via policy-as-code
\n
• Ensure audit-ready pipeline outputs
\n
• Run recovery and resilience testing (game days)
\n

What Were Looking For

\n
• Strong leadership and people management experience
\n
• Deep expertise in CI/CD, DevSecOps, and security integration
\n
• Strong cloud, containerisation, and IaC knowledge
\n
• Proven ability to improve DORA and engineering performance metrics
\n
• Experience with observability and monitoring frameworks
\n
• Strong background in security tooling (SAST, SCA, DAST, scanning tools)
\n
• Solid understanding of cloud security, IAM, and zero-trust principles
\n
• Experience working in complex or regulated environments
\n
• Excellent communication and stakeholder management skills
\n

Whats In It for You

\n
• Impact: Lead a critical DevSecOps capability in a large-scale organisation
\n
• Flexibility: Hybrid and flexible working options
\n
• Career Growth: Ongoing learning, development, and leadership exposure
\n
• Benefits Package: Annual discretionary bonus
\n
• 25 days holiday + bank holidays + holiday trading
\n
• Up to 10% matched pension
\n
• Private medical insurance
\n
• Electric car salary sacrifice scheme
\n
• Colleague mortgage benefits
\n
• 3 paid volunteering days
\n
• Gym discounts & wellbeing support
\n
• Inclusive employee networks
\n

Apply today or reach out directly to Charlie Smith for a confidential chat.

JBRP1_UKTJ