Summary
An experienced DevSecOps Engineer is needed to integrate security throughout the software delivery lifecycle. You will build secure cloud infrastructure, automate security testing, strengthen container and Kubernetes security, improve monitoring and compliance controls, and work with development teams to remediate vulnerabilities. This hybrid role requires active security clearance and eligibility to work in the country.
Highlights
Competitive compensation, hybrid work, and the opportunity to embed security across complex cloud environments while collaborating with engineering, cloud, and cybersecurity teams.
Description
Location: London, Gloucester or Manchester (Hybrid)
Salary: Up to £100,000 + Benefits
Security Clearance: Active SC Clearance required
We're working with a leading technology organisation supporting critical government and defence programmes, who are looking to hire an experienced DevSecOps Engineer to join their growing cyber team.
This is an exciting opportunity to help embed security throughout the software development lifecycle, working alongside engineering, cloud and security teams to design and implement secure, scalable solutions across complex cloud environments.
Key Responsibilities
Embed security into CI/CD pipelines and software delivery processesDesign, build and maintain secure cloud infrastructure across AWS, Azure and/or GCPImplement Infrastructure as Code (Terraform, CloudFormation or similar)Automate security testing including SAST, DAST, SCA and container scanningImprove container and Kubernetes security through best practice implementationWork closely with development teams to identify and remediate security vulnerabilitiesDevelop monitoring, logging and compliance controls across cloud platformsSupport security incident response and vulnerability remediation activitiesPromote DevSecOps best practices and contribute to a strong security culture
Skills & Experience
Commercial experience in a DevSecOps or Cloud Security Engineering rolesStrong knowledge of AWS, Azure or GCPGCP.Experience with Kubernetes and Docker.Experience building and maintaining CI/CD pipelines using Azure DevOps, GitHub Actions, GitLab CI or JenkinsInfrastructure as Code experience using Terraform, CloudFormation or similarKnowledge of container security, vulnerability management and secure coding practicesFamiliarity with security tooling such as Checkov, Trivy, SonarQube, Prisma Cloud, Wiz or SnykScripting experience using Python, Bash or PowerShellExcellent communication skills and the ability to collaborate across engineering and security teams
Essential Requirments
Active SC ClearanceEligible to work in the UKAbility to work from one of the office locations in London, Gloucester or Manchester on a hybrid Basis
