hiya - DevSecOps Lead- London

• Define and execute a multi-quarter security roadmap for the entire engineering organization. • Develop and maintain platform-level security tools that enable automated, self-service security for feature teams. • Partner with Core Tech to integrate security primitives into our standard CI/CD and cloud deployment workflows. • Conduct cross-team discovery to assess current security posture and identify high-risk technical debt. • Mentor junior and peer engineers, fostering a culture where security is integrated into the "you build it, you run it" philosophy. • Stay ahead of evolving threat landscapes, specifically regarding supply chain risks and large-scale AI infrastructure. • Own and mature our existing detection, SIEM, and incident-response tooling as part of building out the broader security platform — this role inherits live systems, it isn't a blank canvas. • Act as a security collaborator to IT on AI-usage risk (data exposure via connectors/agents, prompt injection) — distinct from, and in addition to, securing the AI systems Hiya builds as a product. • Qualities that will make you successful: • Deep understanding of cloud-native architecture (AWS) and modern security best practices. • Proven experience designing "self-service" platforms that developers actually want to use. • Strong communication skills—the ability to turn complex security concerns into decisions engineers and stakeholders can act on. • High proficiency in at least one modern language and familiarity with agent-based/AI-assisted development tools. • Pragmatism—knowing when to accept calculated tech debt in favor of high-impact outcomes. • A leadership style rooted in empathy, collaborative debate, and commitment to team decisions. • Builds systems, documentation, and team capability that outlast you — we're wary of highly productive engineers who leave behind bespoke, unmaintainable tooling that has to be scrapped when they move on. • The person in this role must embody Hiya’s key values of Serving our customers, Doing rather than observing, Improving ourselves and our business, Owning and holding ourselves accountable for success, and Leading by showing up with a point of view, engaging in open discussion, listening respectfully to others opinions and committing to decisions. • The requirements listed in the job descriptions are guidelines. You don’t have to satisfy every requirement or meet every qualification listed. If your skills are transferable we would still love to hear from you. • Hiya is not a passive environment. We expect people to take ownership, form opinions, and engage directly with hard problems. • We work with a high degree of transparency and autonomy. Context is shared openly, and decisions are discussed, challenged, and then made. Once a call is made, we commit and move forward. • You'll be expected to work through ambiguity, weigh tradeoffs, and take responsibility for results, while keeping a high bar for quality and customer trust. • Every team member at Hiya is expected to live our core values: • Serve, our customers and partners by holding a high bar for trust and quality • Own, share in success and open up to failures • Lead, listen, show up with a point of view but commit entirely once a decision has been made • Improve, even if it means changing course or contradicting ourselves • Do, rather than observe • HOW WE INVEST IN YOU