DevSecOps Lead- London

About Hiya At Hiya, we’re making business calls more trusted, useful, and effective. Voice remains one of the most important ways businesses communicate with their customers, but the value of a call depends on trust. When customers do not recognize who is calling or why, important conversations are missed, customer relationships suffer, and business outcomes are harder to achieve. Hiya helps businesses create trusted calling experiences that benefit both sides of the conversation: enterprises can reach customers with confidence, and customers can answer with confidence. Our products support branded business calling, trusted caller identity, call performance insights, customer engagement, and voice security capabilities that help businesses strengthen relationships and improve outcomes. This role sits in a core business area for Hiya and is focused on helping SMB and enterprise customers succeed. About the Position The Lead DevSecOps Engineer is a leadership and individual contributor role responsible for maturing our security posture across all engineering departments. You will lead the design and implementation of automated, platform-based security solutions, enabling teams to build secure software while maintaining velocity. You will partner closely with Core Tech, Product, and Engineering leadership to define our security roadmap and culture. We’re excited about you because you are a trailblazer who balances high-level strategy with hands-on technical execution. You are comfortable building from near-scratch, thrive on educating others, and possess a "platform" mindset that prioritizes empowering developers over acting as a gatekeeper. What You’ll Do • Define and execute a multi-quarter security roadmap for the entire engineering organization. • Develop and maintain platform-level security tools that enable automated, self-service security for feature teams. • Partner with Core Tech to integrate security primitives into our standard CI/CD and cloud deployment workflows. • Conduct cross-team discovery to assess current security posture and identify high-risk technical debt. • Mentor junior and peer engineers, fostering a culture where security is integrated into the "you build it, you run it" philosophy. • Stay ahead of evolving threat landscapes, specifically regarding supply chain risks and large-scale AI infrastructure. • Own and mature our existing detection, SIEM, and incident-response tooling as part of building out the broader security platform — this role inherits live systems, it isn't a blank canvas. • Act as a security collaborator to IT on AI-usage risk (data exposure via connectors/agents, prompt injection) — distinct from, and in addition to, securing the AI systems Hiya builds as a product. Qualities that will make you successful: • Deep understanding of cloud-native architecture (AWS) and modern security best practices. • Proven experience designing "self-service" platforms that developers actually want to use. • Strong communication skills—the ability to turn complex security concerns into decisions engineers and stakeholders can act on. • High proficiency in at least one modern language and familiarity with agent-based/AI-assisted development tools. • Pragmatism—knowing when to accept calculated tech debt in favor of high-impact outcomes. • A leadership style rooted in empathy, collaborative debate, and commitment to team decisions. • Builds systems, documentation, and team capability that outlast you — we're wary of highly productive engineers who leave behind bespoke, unmaintainable tooling that has to be scrapped when they move on. The person in this role must embody Hiya’s key values of Serving our customers, Doing rather than observing, Improving ourselves and our business, Owning and hold