DevOps Engineer (Security Operations)

Skin Analytics; London; Hybrid; GBP 60,000 - 80,000; Full time

Job summary

A healthcare technology company in London seeks a DevOps Specialist. This role involves securing and scaling infrastructure for clinical software while collaborating with engineering and regulatory teams. You'll design compliant delivery pipelines and manage secure AWS environments. A commitment to in-office work for 3 days a week is required. The company offers competitive pay, share options, and a commitment to diversity.

Benefits

Competitive salary

Share options package

Private healthcare

25 days annual leave

Enhanced parental leave

Bike to work scheme

Training budget

Social activities

Qualifications

• Deep expertise in AWS (EC2, S3, RDS, IAM, etc.)
• Experience in CI/CD pipelines using tools like Bitbucket
• Capabilities in Security Operations like Snyk and MFA

Responsibilities

• Manage secure AWS infrastructure and CI/CD pipelines.
• Implement security scans across SDLC.
• Maintain AWS infrastructure as code using Terraform.

Skills

AWS

CI/CD Pipelines

Security Operations

Terraform

Ansible

Docker

ISO 27001

IEC 62304

Networking knowledge

Job description

In this role you will lead the charge in securing and scaling our infrastructure and CI/CD pipelines for regulated clinical software. Working cross-functionally with engineering, QA, product, and regulatory teams, you’ll design, implement, and monitor secure, traceable DevOps workflows. You enable rapid, compliant delivery of Software as a Medical Device (SaMD) products.

Please note: this role requires in office presence for 3 days a week. Our office is in Farringdon, London. If you can't commit to this, please don't apply.


Responsibilities

• Own SecOps across our stack by managing secure AWS infrastructure, CI/CD pipelines, and developer environments using least-privilege and zero-trust principles.
• Integrate automated security scans (Snyk, Docker, IaC) into all stages of the SDLC.
• Design, implement, and maintain AWS infrastructure as code using Terraform and Ansible
• Deliver threat models and drive remediations across cloud services (EC2, S3, RDS, etc.).
• Build Docker-first workflows with image scanning, tagging, and artifact management.
• Write and own SOPs for secure deployment and incident response aligned to ISO 27001 and IEC 62304.
• Extend observability through CloudWatch/ELK stack dashboards, anomaly detection, and alerting for security and performance monitoring.
• Support Transformation team by resolving any security queries that clients might have in their onboarding & deployment
  

What success looks like:
3 months

• Complete access audits and enforce secure MFA + least-privilege access across AWS, Bitbucket, and key tools
• Identify and remediate top 5 security risks in CI/CD pipelines and cloud architecture
• Fully integrate Snyk into all pipelines with automated alerts and reporting

6 months

• Mature pipelines to support automated tests, security gates, and gated deploys across all services

12 months

• Implement full-stack observability with anomaly alerts and dashboards for security and reliability using the ELK stack

Have deep expertise in:

• Cloud Infrastructure (AWS): EC2, S3, RDS, IAM, VPC, CloudWatch, CloudTrail, Lambda, SQS/SNS
• CI/CD Pipelines: Bitbucket Pipelines (or similar), multi-stage pipeline management, gated deployments
• Security Operations: Snyk, IAM policies, threat modeling, zero-trust access, MFA, secrets management
• Implementing and automating compliance requirements (IEC 62304, ISO 27001, HIPAA, MDR)
• Delivering secure software pipelines for Node.js, React, and Docker-based services
• Writing secure deployment ansible playbooks and participating in internal audits or regulatory submissions
• Production workloads supported by Terraform and ansible, hosted on AWS
• Strong networking knowledge, including VPCs, subnets, routing tables, security groups, and NACLs, route53, load balancers

Behaviours required:

• Takes ownership: full accountability for infra, tooling, and controls; sees it through to completion.
• Bias for automation: believes manual work should be temporary, builds repeatable pipelines and workflows.
• Detail obsessed: doesn't miss the small stuff. Every commit, config, and policy matters in regulated software.
• Clear communicator: explains risks, trade-offs, and technical plans to both engineers and non-tech stakeholders.
• Collaborative & pragmatic: works well across disciplines and adapts to real-world constraints.

Competitive salary

Share options package - all our employees have ownership in the company

Private healthcare

25 days annual leave (5 day company shutdown in August + bank holidays)

Enhanced parental leave - includes adoption & foster

Bike to work scheme

Training budget

Weekly catch-ups, monthly meetings to talk about you, your ambitions and make plans

Lots of fun social activities including company offsite!

Our Values

Building a Strong Foundation

Always Learning

Lead from the Front

Tough and Resilient

The Real Stuff

Skin Analytics embraces and is committed to diversity and equal opportunities. We are dedicated to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our work will be.