DevOps Engineer (Security Operations)

Skin Analytics; City of Westminster; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A technology-focused company in London seeks a DevOps Security Engineer to lead cloud security efforts and manage CI/CD pipelines for regulated software. This role requires a commitment to in-office presence for 3 days a week. Ideal candidates will have extensive experience with AWS, CI/CD processes, and security best practices, along with a bias for automation and detail obsession. Competitive salary and great benefits package offered.

Benefits

Competitive salary

Share options package

Private healthcare

25 days annual leave

Enhanced parental leave

Bike to work scheme

Training budget

Social activities

Qualifications

• Experience managing AWS infrastructure and services.
• Strong background in CI/CD pipeline management.
• Knowledge of security best practices and operations.
• Experience with compliance in regulated environments.

Responsibilities

• Manage and secure AWS infrastructure and services.
• Integrate security into the development lifecycle.
• Design and maintain CI/CD workflows with a focus on security.
• Monitor and enhance cloud service security.

Skills

Cloud Infrastructure

CI/CD Pipelines

Security Operations

Compliance Automation

Secure Software Delivery

Ansible Playbooks

Networking Knowledge

Tools

AWS

Terraform

Snyk

Docker

Bitbucket

ELK Stack

Job description

Overview

In this role you will lead the charge in securing and scaling our infrastructure and CI/CD pipelines for regulated clinical software. Working cross-functionally with engineering, QA, product, and regulatory teams, you'll design, implement, and monitor secure, traceable DevOps workflows. You enable rapid, compliant delivery of Software as a Medical Device (SaMD) products.

Please note: this role requires in-office presence for 3 days a week. Our office is in Farringdon, London. If you can't commit to this, please don't apply.

Responsibilities

• Own SecOps across our stack by managing secure AWS infrastructure, CI/CD pipelines, and developer environments using least-privilege and zero-trust principles.
• Integrate automated security scans (Snyk, Docker, IaC) into all stages of the SDLC.
• Design, implement, and maintain AWS infrastructure as code using Terraform and Ansible.
• Deliver threat models and drive remediations across cloud services (EC2, S3, RDS, etc.).
• Build Docker-first workflows with image scanning, tagging, and artifact management.
• Write and own SOPs for secure deployment and incident response aligned to ISO 27001 and IEC 62304.
• Extend observability through CloudWatch/ELK stack dashboards, anomaly detection, and alerting for security and performance monitoring.
• Support Transformation team by resolving any security queries that clients might have in their onboarding & deployment.

What success looks like

• 3 months:
  • Complete access audits and enforce secure MFA + least-privilege access across AWS, Bitbucket, and key tools.
  • Identify and remediate top 5 security risks in CI/CD pipelines and cloud architecture.
  • Fully integrate Snyk into all pipelines with automated alerts and reporting.
• 6 months:
  • Mature pipelines to support automated tests, security gates, and gated deploys across all services.
• 12 months:
  • Implement full-stack observability with anomaly alerts and dashboards for security and reliability using the ELK stack.

Requirements

• Cloud Infrastructure (AWS): EC2, S3, RDS, IAM, VPC, CloudWatch, CloudTrail, Lambda, SQS/SNS
• CI/CD Pipelines: Bitbucket Pipelines (or similar), multi-stage pipeline management, gated deployments
• Security Operations: Snyk, IAM policies, threat modeling, zero-trust access, MFA, secrets management
• Implementing and automating compliance requirements (IEC 62304, ISO 27001, HIPAA, MDR)
• Delivering secure software pipelines for Node.js, React, and Docker-based services
• Writing secure deployment Ansible playbooks and participating in internal audits or regulatory submissions
• Production workloads supported by Terraform and Ansible, hosted on AWS
• Strong networking knowledge, including VPCs, subnets, routing tables, security groups, and NACLs, Route53, load balancers

Behaviours required

• Takes ownership: full accountability for infra, tooling, and controls; sees it through to completion.
• Bias for automation: believes manual work should be temporary, builds repeatable pipelines and workflows.
• Detail obsessed: doesn't miss the small stuff. Every commit, config, and policy matters in regulated software.
• Clear communicator: explains risks, trade-offs, and technical plans to both engineers and non-tech stakeholders.
• Collaborative & pragmatic: works well across disciplines and adapts to real-world constraints.

Benefits

• Competitive salary
• Share options package - all our employees have ownership in the company
• Private healthcare
• 25 days annual leave (5 day company shutdown in August + bank holidays)
• Enhanced parental leave - includes adoption & foster
• Bike to work scheme
• Training budget
• Weekly catch-ups, monthly meetings to talk about you, your ambitions and make plans
• Lots of fun social activities including company offsite!

Our Values

Building a Strong Foundation • Always Learning • Lead from the Front • Tough and Resilient

The Real Stuff Skin Analytics embraces and is committed to diversity and equal opportunities. We are dedicated to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our work will be.