DevSecOps Engineer

Instem plc; Aston-by-Stone; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading software solutions provider is seeking a DevSecOps Engineer to enhance platform security and embed security practices into development processes. The role involves assessing security postures, leading improvements, and integrating security into CI/CD pipelines. Candidates should have strong experience in DevSecOps, particularly with Azure and cloud environments, alongside a solid background in software development. This position offers hybrid working, allowing for flexibility and a supportive environment.

Benefits

Competitive Salary

Flexible Working

Private Medical Insurance

Matching Contributory Pension

25 Days Leave

Life Insurance

Qualifications

• Strong hands-on experience in DevSecOps, platform security or cloud security engineering.
• Demonstrable experience working across the full SDLC.
• Deep experience securing Azure environments, with working knowledge of AWS.
• Practical experience applying threat modelling techniques.

Responsibilities

• Assess current security posture of platforms and environments.
• Lead definition of pragmatic improvements to security maturity.
• Embed security into platform architecture and CI/CD pipelines.
• Design and build secure Azure landing zones.
• Participate in security incidents and post-incident reviews.

Skills

DevSecOps

Cloud security engineering

Software development

Platform security

Azure security

AWS

Infrastructure as Code

Automation scripting

Tools

Terraform

Bicep

PowerShell

Python

Bash

Job description

Overview

DevSecOps Engineer (Location: Stone, Staffordshire Hybrid working, 2 days a week in our Stone Office) • Status: Permanent, Full Time • Package: Competitive Salary, Flexible Working, Development & Opportunity (Personal & Technical), Private Medical (Optical & Dental options), Matching Contributory Pension, 25 Days Leave + Public Holidays + Buy and Sell Scheme, Life Insurance, Referral Scheme, Employee Assistance Program, Benefits Hub.

Who's Instem?

Well, we're a global provider of bespoke industry-leading software solutions and services, which facilitate the pre-clinical, and clinical phases of the drug discovery process. We have over fifteen products in our portfolio, used by over 700 pharmaceutical clients (including all the top 25!).

Culture and Environment

For a global business of over 400 staff, we have a family feel. You'll be part of a friendly, communal, solution-based, flexible environment, where you'll feel empowered, valued and accountable. We'll invest in you as a person and encourage you to take part in company-wide workshops for wellbeing, mental health, critical conversations, and strengths.

The mission of the Senior DevSecOps Engineer is to embed security into how our platforms are designed, built, and operated, while also advancing the security maturity of an existing, live estate.

Role context

This role sits within the Platform Engineering team and works closely with SRE, development teams, and our managed SOC. You will operate in an environment that includes established platforms, legacy patterns, and in-flight migrations, alongside newer cloud-native services. A key part of the role is understanding what exists today, identifying material risks and gaps and leading pragmatic improvements over time.

You will be expected to operate with a high degree of autonomy. This is a developing senior role for someone who can gather information, form a clear view of the current state, and advise on priorities and direction without needing a fully defined roadmap. You will influence platform security strategy through evidence, engineering judgement, and collaboration.

What are you responsible for?

• Assess the current security posture of our existing platforms, pipelines and cloud environments
• Gather and synthesise information across teams to build a clear view of current risks, gaps, and constraints
• Lead the definition of pragmatic, prioritised improvements to security maturity over time
• Embed security into platform architecture, infrastructure and CI/CD pipelines across the SDLC
• Introduce and evolve a practical threat modelling approach appropriate to a mixed legacy and cloud native estate
• Design, build and improve secure Azure landing zones and shared platform services
• Ensure migrations from managed data centres into Azure result in measurable security improvements
• Jointly own security monitoring and detection capabilities with the managed SOC, shaping alerts, workflows, and responsibilities
• Own and evolve security guardrails using policy as code and automated controls
• Integrate security testing into delivery pipelines, including code, dependency, container and infrastructure scanning
• Partner with Platform Engineers to define secure by default patterns and reusable components
• Work with SREs to align runtime security, observability, and incident response
• Participate in security incidents and post-incident reviews, driving long term corrective actions
• Enable engineering teams through capture the flag exercises, threat scenarios and hands-on security learning
• Provide clear, evidence-based security advice to platform, architecture and delivery leadership

Skills, Knowledge, Experience

• Strong hands-on experience in DevSecOps, platform security or cloud security engineering
• Background as a software developer, platform engineer, or architect, with a solid understanding of how real systems are built and delivered is a real advantage
• Demonstrable experience working across the full SDLC, including design, development, testing, deployment and operation
• Ability to reason about security in the context of application code, infrastructure and runtime behaviour rather than in isolation
• Deep experience securing Azure environments, with working knowledge of AWS
• Proven experience designing, assessing and evolving secure cloud landing zones
• Practical experience applying threat modelling techniques to both new and existing systems
• Strong experience integrating security controls and testing into CI/CD pipelines
• Solid Infrastructure as Code experience (Terraform, Bicep, ARM, etc.)
• Experience securing containers, Kubernetes, and cloud native workloads
• Familiarity with modern testing practices, including unit, integration, and security testing and how they fit together
• Strong automation and scripting skills (PowerShell, Python, Bash, etc.)
• Experience working alongside managed security providers or SOC teams

An Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, colour, religion, sex, sexual orientation, gender identity, national origin, or protected veteran status and will not be discriminated against on the basis of disability.

Instem stores and processes data using an Applicant Tracking System (ATS). For more information regarding our privacy policy use the following link: https://www.instem.com/privacy/

#LI-KL #LI-HYBRID