> Markdown version of [/jobs/ext/2786215-senior-software-engineer-devsecops](https://www.wearedevelopers.com/jobs/ext/2786215-senior-software-engineer-devsecops). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Software Engineer (DevSecOps) - **Company:** The BBC - **Location:** London, UK - **Experience:** Expert - **Salary:** £70,000.0 - £80,000.0 - **Contract:** Permanent contract - **Skills:** Application Programming Interfaces (APIs), Artificial Intelligence, Automation of Tests, Cyber Security, Operational Data Store, Cloud Services, Software Engineering, Data Streaming, Systems Integration, Software Vulnerability Management, Cloud Platform System, Software Security, Media Technology, Infrastructure Automation Frameworks, Webhooks, Devsecops, Programming Languages - **Published:** September 8, 2026 - **Apply:** https://www.collegerecruiter.com/job/2856353652-senior-software-engineer-devsecops ## About the Role * Hands-on experience operating and improving vulnerability-management, application-security or other security platforms used by engineering teams. * A strong understanding of the vulnerability-management lifecycle, including prioritisation, ownership, risk treatment, resolution and reporting. * Strong software engineering experience building and operating production services, integrations or automation using at least one modern programming language. * Experience designing secure integrations and data flows across cloud environments using APIs, Infrastructure as Code, webhooks or event-driven patterns, with attention to identity and access management, least-privilege design, secrets, failure handling and operational monitoring. * Strong technical judgement and communication skills, with experience working across engineering teams to shape designs, explain trade-offs and deliver practical outcomes., * Experience working in DevSecOps, application security, security engineering or platform engineering. * Experience building or operating shared technical capabilities used by multiple engineering teams. * Experience adapting technical platforms to support different teams, workflows and reporting needs. * Experience integrating security, engineering or operational data from multiple systems. * Experience applying automation, data or AI to improve engineering, security or operational workflows. If you can bring some of these skills and experience, along with transferable strengths, we'd love to hear from you and encourage you to apply. Before your start date, you may need to disclose any unspent convictions or police charges, in line with our Contracts of Employment policy. This allows us to discuss any support you may need and assess any risks. Failure to disclose may result in the withdrawal of your offer. Disclaimer This job description is a written statement of the essential characteristics of the job, with its principal accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved. Please note: If you were to be offered this role, the BBC will conduct Employment screening checks which include Reference checks; Eligibility to work checks; and if applicable to the role, Safeguarding and Adverse media/Social media checks. Any offer made is conditional on these checks being satisfactory. Before your start date, you may need to disclose any unspent convictions or police charges, in line with our Recruitment policy. This allows us to discuss any support you may need and assess any risks. Failure to disclose may result in the withdrawal of your offer. ## Description Join Media Technology's Dev Operations team as a Senior Software Engineer, DevSecOps. You'll operate and evolve the platforms and workflows that help engineering teams understand, own and reduce security risk across applications and cloud services. This is a hands-on role spanning vulnerability management, platform ownership, software engineering, integrations and automation, with opportunities to apply emerging AI-assisted capabilities where they can improve security and engineering outcomes., Dev Operations works across Media Technology to improve how engineering risk is understood and managed at scale. You'll help shape a growing security engineering capability, combining platform ownership with software engineering to make vulnerability management more effective and easier for teams to adopt. You'll have room to influence technical direction, build reusable patterns and explore practical uses of AI and automation in security operations., * Operate and evolve security posture and vulnerability-management platforms, including configuration, access, integrations, data quality, risk policies and reporting. * Own the technical implementation of vulnerability-management workflows, from prioritisation and assignment through to risk treatment, resolution and reporting. * Monitor platform health and effectiveness, investigate data and integration issues, and work with suppliers where product support or changes are required. * Design, build and operate integrations and automation that connect security findings with the technical and organisational context needed to make them actionable. * Work with engineering teams and technical leaders to improve ownership, prioritisation and risk-management outcomes, turning successful approaches into reusable patterns. * Maintain strong engineering standards through automated testing, observability, documentation, technical review and operational support. * Evaluate, prototype and integrate AI-assisted capabilities where they can improve security analysis, prioritisation, remediation support or operational workflows. ## Related Videos - [Hosting a modern justice system](https://www.wearedevelopers.com/videos/332-hosting-a-modern-justice-system) - [DevSecOps: Injecting Security into Mobile CI/CD Pipelines](https://www.wearedevelopers.com/videos/273-devsecops-injecting-security-into-mobile-ci-cd-pipelines) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Beyond Webhooks: The Future of Scalable API Event Delivery](https://www.wearedevelopers.com/videos/100312-beyond-webhooks-the-future-of-scalable-api-event-delivery) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevSecOps culture](https://www.wearedevelopers.com/videos/783-devsecops-culture) ## Related Articles - [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers) - [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london) - [Software Engineer Salary in The UK](https://www.wearedevelopers.com/magazine/231-software-engineer-salary-in-the-uk) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)