DevSecOps Engineer - Remote - £110K

This job was posted over 30 days ago, so it has most likely closed. See newer jobs like it.

Written by AI from the job title and company, not by RemoteWorker UK, so some details may not match this job. The employer's own page has the real description.

Job Overview

The DevSecOps Engineer will play a pivotal role in integrating security practices into the DevOps process at RemoteWorker UK. This position requires a proactive approach to identifying potential vulnerabilities in application and infrastructure components while ensuring that security is a key consideration throughout the software development lifecycle (SDLC). The successful candidate will collaborate closely with development, operations, and security teams to design and implement automated processes that embed security controls, maintain compliance, and enhance overall cybersecurity posture.

Job Responsibilities

• Develop and maintain security policies, guidelines, and procedures for the software development lifecycle.
• Automate security testing and compliance checks within CI/CD pipelines.
• Conduct vulnerability assessments and penetration testing to identify and mitigate security risks.
• Collaborate with developers and operation teams to improve security controls and practices.
• Monitor security incidents and respond effectively to align with best practices and compliance requirements.
• Provide training and guidance to teams on secure coding practices and security protocols.
• Stay informed on the latest security trends and threats to effectively protect the organization.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 3+ years of experience in a DevSecOps role or relevant experience in security engineering.
• Proficiency with security tools such as SAST, DAST, and container security solutions.
• Strong knowledge of cloud platforms (e.g., AWS, Azure) and their security frameworks.
• Experience with scripting languages such as Python, Bash, or PowerShell.
• Relevant certifications such as CISSP, CISM, or AWS Certified Security Specialty are highly desirable.

Technologies & Tools

The DevSecOps Engineer will work with a variety of technologies and tools, including but not limited to CI/CD tools like Jenkins and GitLab CI, container orchestration platforms such as Kubernetes and Docker, cloud infrastructure management tools for AWS or Azure, and security tools including SAST and DAST solutions. Familiarity with infrastructure as code (IaC) tools such as Terraform and configuration management solutions would also be advantageous.

Ideal Candidates

The ideal candidates for this position are those who possess a strong analytical mindset, attention to detail, and a commitment to improving security practices within software development. They should be effective communicators and collaborators with the ability to work across multiple teams. A passion for staying ahead of industry trends and continuously seeking innovative methods to enhance security will set successful candidates apart in this role.