DevSecOps Engineer

So Code Limited; Town Of Cambridge; On-site; AUD 85,000 - 113,000; Part time

Job summary

So Code Limited in Cambridge is seeking a hands-on DevSecOps Engineer to join our growing DevOps team. The role is mid-level and focuses on building security into the development and release process across embedded, desktop and web products.

You’ll harden Linux systems, extend CI/CD pipelines with GitLab CI / TeamCity, integrate SAST/DAST and SBOMs, and work with Docker, IaC and automation to improve software supply-chain security.

Qualifications

• 3+ years in DevOps, DevSecOps, Platform, Build/Release or similar.
• Strong hands-on Linux experience.
• Good CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar.
• Strong Python and Bash scripting.
• Working knowledge of Docker.
• Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management.
• Good understanding of security fundamentals including least privilege, secrets management and patching.
• Comfortable working with Git and troubleshooting unfamiliar systems.

Responsibilities

• Build and improve CI/CD pipelines across GitLab CI / TeamCity.
• Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs.
• Investigate CVEs and work with development teams on remediation.
• Harden Linux systems and support security/compliance requirements.
• Maintain Linux and Windows build infrastructure.
• Work with Docker, infrastructure-as-code and automated tooling.
• Help improve software supply-chain security, secrets management and release processes.
• Review infrastructure, pipeline and application changes.
• Create clear technical documentation and runbooks.

Skills

Linux

CI/CD

Python

Bash

Git

Security fundamentals

Secrets management

Tools

Docker

Trivy

Semgrep

SonarQube

Nessus

OWASP ZAP

OpenSCAP

Terraform

Ansible

Job description

DevSecOps Engineer – Cambridge
£45,000 - £60,000 (depending on experience level)
3 days per week in Cambridge
No Sponsorship option
SC Clearance preferable
I’m working with an established technology business in Cambridge that’s looking to bring in a DevSecOps Engineer to join their growing DevOps team.
This is a hands-on, mid-level role for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security.
You’ll be working across embedded, desktop and web products, helping build security into the development and release process.
What you’ll be doing:

• Build and improve CI/CD pipelines across GitLab CI / TeamCity
• Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs
• Investigate CVEs and work with development teams on remediation
• Harden Linux systems and support security/compliance requirements
• Maintain Linux and Windows build infrastructure
• Work with Docker, infrastructure-as-code and automated tooling
• Help improve software supply-chain security, secrets management and release processes
• Review infrastructure, pipeline and application changes
• Create clear technical documentation and runbooks

What they’re looking for:

• 3+ years in DevOps, DevSecOps, Platform, Build/Release or similar
• Strong hands-on Linux experience
• Good CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar
• Strong Python and Bash scripting
• Working knowledge of Docker
• Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management
• Good understanding of security fundamentals including least privilege, secrets management and patching
• Comfortable working with Git and troubleshooting unfamiliar systems

Useful but not essential:

• NIST, DISA STIGs, CIS, FIPS, ISO 27001 or Cyber Essentials Plus
• Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP
• Terraform or Ansible
• AWS / VMware / Proxmox
• Windows build environments and PowerShell
• Embedded Linux
• C/C++, Rust, .NET or JavaScript/TypeScript build environments
• Experience within defence, aerospace or another regulated environment