DevSecOps Architect

Job Overview

Multiverse is the upskilling platform for AI and Tech adoption. We have partnered with 1,500+ companies to deliver a new kind of learning that's transforming today’s workforce. Our upskilling apprenticeships are designed for people of any age and career stage to build critical AI, data, and tech skills. Our learners have driven $2bn+ ROI for their employers, using the skills they’ve learned to improve productivity and measurable performance.

In June 2022, we announced a $220 million Series D funding round co-led by StepStone Group, Lightspeed Venture Partners and General Catalyst. With a post-money valuation of $1.7bn, the round makes us the UK’s first EdTech unicorn. But we aren’t stopping there. With a strong operational footprint and 800+ employees, we have ambitious plans to continue scaling. We’re building a world where tech skills unlock people’s potential and output.

The Opportunity

We are looking for a DevSecOps Architect to join our Information Security team. In this role, you will be a collaborative and strategic partner to our engineering teams, helping design the automation that enables us to ship secure code at velocity. You will advocate for a "Security by Design" culture, ensuring that robust security practices are seamlessly integrated into the fabric of our product development processes.

Key Responsibilities

• Architect Automated Security Pipelines: Partner with the Platform team to design and implement advanced automated security controls (SAST, DAST, SCA) within our CI/CD pipelines, providing engineers with rapid, high-fidelity feedback.


• Infrastructure and Policy as Code: Guide the security architecture for our AWS environment by treating infrastructure as software enabling secure and scalable deployments and ensure automated compliance.


• Threat Detection Engineering: Engineer advanced threat detection capabilities by integrating platform logs and event data (including RabbitMQ) into our SIEM (Google Security Operations). Develop and tune YARA-L rules to proactively identify and respond to threats.


• Collaborative Design and Threat Modelling: Partner with engineering squads during the design phase of new features, facilitating collaborative threat modelling sessions to build security in from the start.


• Developer Enablement: Create feedback loops that deliver security insights directly into developer workflows (e.g., automated PR comments), enabling teams to self-remediate and learn continuously.

Required Qualifications

• Cloud Security Architecture: Experience designing secure, scalable architectures on cloud platforms (AWS preferred, but GCP or Azure experience is acceptable).


• Infrastructure as Code: Experience securing Terraform codebases and building secure modules for other teams to use.


• CI/CD Orchestration: Experience with modern pipelines (e.g., CircleCI, GitHub Actions, or GitLab) and integrating security steps.


• Automation Engineering: Ability to write script and code (e.g., Python, Typescript) to build integrations and tooling.


• Modern Detection Engineering: Interest or experience with modern detection engineering (e.g., Google Chronicle, YARA-L, or similar SIEM tools).


• Architecture Patterns: Familiarity with securing API-first and Event-Driven Architectures.


• Incident Response and Operations: Participate in the team's on-call rotation, including out-of-hours coverage to support platform availability and security.


• Ambiguity: Thrive in ambiguous and fast-changing environments, making progress even when requirements are evolving.

Bonus Points

• Experience with automated policy enforcement.


• Familiarity with functional programming concepts or Elixir (our core backend language).


• Familiarity with securing AI/ML pipelines or services.


• Experience implementing SCA (Software Composition Analysis).


• A pragmatic approach: Focus on high-impact security wins that support business agility.

About Certifications

We value practical experience and a willingness to learn over specific acronyms. While certifications like CISSP, CISM, or AWS Security are a bonus, they are not required to join our team.

Benefits

Time off - 27 days holiday, plus 5 additional days off: 1 life event day, 2 volunteer days, 2 company-wide wellbeing days (M-Powered Weekend) and 8 bank holidays per year

Health & Wellness- private medical Insurance with Bupa, a medical cashback scheme, life insurance, gym membership & wellness resources through Wellhub and access to Spill - all in one mental health support

Hybrid work offering - for most roles we collaborate in the office three days per week with the exception of Coaches and Instructors who collaborate in the office once a month

Work-from-anywhere scheme - you'll have the opportunity to work from anywhere in the UK for up to 30 days per year