Delivery Lead

We are looking for an outstanding Delivery Lead to work on a new project with one of our key partners. Hybrid working arrangements with onsite team meetups a couple of times a month in Bristol.

The Role:

1. Standups, Demos/workshops, Retrospectives, Refinements and planning

2. Post Mortems/Security Incidents

3. Orchestrating the pairing rotas and records

4. Monitor team dynamics and facilitate engagement and review of the Team Charter and team processes

5. Maintaining the timesheet tracker

6. Triaging Platform Support tickets (as per the Triage Rota)

7. Communicating out the current state and intent of the team

8. Onboarding/Offboarding new starters and leavers

9. Managing access and permissions for the team

10. Building and maintaining relationships with suppliers

11. Running experiments on behalf of the team to support definition of work or process change

12. Maintaining team motivation and building team capability to deliver the roadmap

13. Writing stories

14. User research and representing the team's customers

15. Establishing and maintaining the roadmap and vision for the team's products

16. Attending DL CoP and collaborating with Platform DLs on continuous improvement initiatives

Your Skills:

1. Application Security background

2. Excellent written and verbal communication skills

3. Help engineers understand vulnerabilities from various sources and how to prioritise them

4. Have knowledge of the Secure Software Development Lifecycle

5. Understand and establish the OWASP ASVS across the platform

6. Understand and assess current software development practices against OWASP SAMM

7. Understand and be able to communicate the application of Secure Coding Practices

8. Knowledge of current browser security features, best practice for both front and backend applications, Dynamic Application Security Testing and Static Application Security Testing

The following would be beneficial:

1. Knowledge of Scala or have a software development background

2. Experience of establishing a security champion programme or developing and fostering a security community

3. Knowledge of the PCI DSS

4. An understanding of Supply Chain security, standards, and best practice

Related Tech:
Google mail, Slack, Atlassian Confluence, Atlassian Jira, Mural, GDS Service Standards, Kanban, Scrum