AWS DevSecOps Security Engineer

Sanderson; Greater London; On-site; GBP 70,000 - 95,000; Full time

Job summary

Sanderson is seeking a Security Engineer to deliver and maintain security controls across multiple technology workstreams as part of a major transformation programme in the United Kingdom. You will work closely with senior security specialists to secure cloud platforms, improve DevSecOps processes, manage vulnerabilities, and embed security throughout delivery.

In this role you will review infrastructure, code and configuration changes for security risks, support threat modelling and security

Qualifications

• Experience in security engineering within DevSecOps or platform engineering.
• Background with AWS, IAM, Kubernetes and container security.
• Experience with Terraform and Infrastructure-as-Code.
• Experience with CI/CD security tooling (SAST, SCA, container and IaC scanning).
• Scripting in Python or Bash.
• Experience with vulnerability management and risk assessment in regulated environments.

Responsibilities

• Implement and optimise CI/CD security tooling.
• Manage vulnerabilities and support remediation activities.
• Review infrastructure, code and configuration changes for security risks.
• Support threat modelling and security assurance activities.
• Maintain secrets management, certificates and access controls.
• Develop reusable security controls and best practices.
• Produce security documentation and evidence.

Skills

Security Engineering

DevSecOps

Vulnerability Management

Regulated environment experience

Threat modelling

Python/Bash scripting

Tools

AWS

Kubernetes

Terraform

CI/CD tooling (SAST/SCA)

Container security

IaC scanning

Job description

Sanderson is seeking a Security Engineer to deliver and maintain security controls across multiple technology workstreams as part of a major transformation programme in the United Kingdom. You will work closely with senior security specialists to secure cloud platforms, improve DevSecOps processes, manage vulnerabilities, and embed security throughout delivery.

In this role you will review infrastructure, code and configuration changes for security risks, support threat modelling and security