DevSecOps Engineer

About the company

We’re delighted to be partnering with a major UK retail business to recruit a DevSecOps Engineer. This is a key role in making sure the business’s technology is secure, reliable and easy for its engineering teams to work with.

Your tasks

You’ll collaborate across the business to build security into the software development process, strengthen cloud platforms and automate controls, while helping to create a culture where security is seen as an enabler rather than a blocker.

What you’ll be doing

• Designing, implementing and improving DevSecOps controls throughout the software delivery lifecycle
• Integrating security tooling into CI/CD pipelines
• Securing and governing multi-cloud environments across AWS and GCP
• Developing cloud security baselines, guardrails and best practices
• Implementing and maintaining CSPM/CNAPP controls
• Making sure cloud deployments comply with security standards and policies
• Supporting threat modelling and security architecture reviews for cloud-native solutions
• Assisting with security investigations and incident response
• Supporting detection engineering initiatives

Requirements

What we’re looking for

• Experience in DevOps, cloud security, platform engineering or DevSecOps roles (ideally 1–6 years, but all levels considered)
• Cloud platform experience, particularly AWS
• Experience applying security principles within modern software development and cloud environments
• Infrastructure as Code and automation experience with tools such as Terraform, CDK or CloudFormation
• Experience with CI/CD pipelines and DevOps practices
• Experience identifying, investigating and remediating security risks and vulnerabilities
• Experience working closely with engineering teams to embed security into the development lifecycle
• Python coding experience
• A collaborative approach and the ability to build positive relationships with technical and non-technical colleagues
• Natural curiosity and enjoyment of learning new technologies, tools and ways of working
• Ownership of problems, seeing them through to a successful outcome
• The ability to balance security, risk and business needs to make pragmatic decisions
• A passion for sharing knowledge and helping others grow

What would make you stand out

• Google Cloud Platform (GCP) experience
• Cloud security experience in a large-scale environment
• Experience with security testing, threat modelling or application security
• Experience building developer-focused tooling, guardrails or self-service platform capabilities
• Relevant cloud or security certifications

What we offer

Salary: £30,000–£60,000 per year + up to 15% bonus

What’s on offer

• £30,000–£60,000 per year, depending on experience
• Discretionary bonus of up to 15%
• Share save scheme
• Pension
• Annual leave
• Hybrid working, with a minimum of one day a week in the office

How to apply

After applying, you will be invited to create your profile on the Via platform. Your profile stays anonymous until you match.

If you’re a security-minded engineer who enjoys making things safer without slowing people down, we’d love to hear from you. Apply today with your CV and one of our consultants will be in touch.

Register your details on Via to progress your application. Create one profile and be matched to this role and other relevant opportunities,including roles advertised exclusively on Via.

Other

DevSecOps Engineer – Leicestershire (Hybrid) – £30,000–£60,000 + Bonus

Location: Leicestershire (hybrid – minimum 1 day per week in the office)