Cloud Security Engineer - DevSecOps & Threat Modelling

BT Group; Belfast City District; On-site; GBP 60,000 - 90,000; Full time

Benefits offered by this job

10% on target annual bonus

Private GP access 24/7

Paid carers leave

Maternity/Paternity leave - 18 weeks/8

BT product discounts

Pension scheme

Holiday purchase scheme

Job summary

BT Group in Belfast is seeking a Software Engineering Specialist to design and build secure cloud infrastructure and automate security testing. You will work on CI/CD pipelines, threat modelling, and remediation with engineering teams. Strong DevSecOps skills and experience with AWS/Kubernetes/Docker are essential.

You will develop internal tooling in Go, Python, or TypeScript and contribute to incident response and security improvements across complex systems.

Qualifications

• Cloud infrastructure and platform engineering experience in AWS, Kubernetes, Docker.
• Experience embedding security into CI/CD and automating security controls.
• Strong knowledge of threat modelling and vulnerability management.
• Proficiency in Go, Python or TypeScript for internal tooling.

Responsibilities

• Design and build secure cloud infrastructure.
• Improve CI/CD pipelines with security built in.
• Automate security testing and policy enforcement.
• Develop internal tooling in Go, Python, TypeScript, or similar.
• Investigate vulnerabilities and work with engineering teams on remediation.
• Perform offensive security exercises against applications and infrastructure.
• Build detections and preventative controls based on findings.
• Threat model new services before they ship.
• Improve developer experience around secure software delivery.
• Contribute to incident response and post-incident improvements.

Skills

Cloud Infrastructure

DevSecOps

CI/CD Security

Go/Python/TypeScript

Threat Modelling

Vulnerability Management

Security Testing

Tools

AWS

Kubernetes

Docker

Terraform

Pulumi

Go

Python

TypeScript

Burp Suite

OWASP ZAP

Nmap

Semgrep

Trivy

Job description

BT Group in Belfast is seeking a Software Engineering Specialist to design and build secure cloud infrastructure and automate security testing. You will work on CI/CD pipelines, threat modelling, and remediation with engineering teams. Strong DevSecOps skills and experience with AWS/Kubernetes/Docker are essential.

You will develop internal tooling in Go, Python, or TypeScript and contribute to incident response and security improvements across complex systems.