DevSecOps Engineer

TN United Kingdom; Bury; On-site; GBP 50,000 - 80,000; Full time

Job summary

Join a forward-thinking company as a DevSecOps Engineer, where you'll integrate security into the software development lifecycle. This role is pivotal in enhancing security practices, collaborating with diverse teams, and ensuring compliance with industry standards. You'll implement cutting-edge security tools within CI/CD pipelines and conduct thorough vulnerability assessments. As part of a dynamic team, you'll have the opportunity to continuously improve security processes while making a significant impact on the organization. If you're passionate about security and innovation, this position offers a fantastic opportunity to grow your career.

Qualifications

• Proven experience as a DevSecOps Engineer or in a similar role.
• Strong understanding of DevOps principles and practices.
• Knowledge of security frameworks and compliance standards.

Responsibilities

• Implement and manage security tools within the CI/CD pipeline.
• Collaborate with teams to integrate security measures.
• Conduct security assessments and vulnerability testing.

Skills

DevSecOps

CI/CD Tools

Python

PowerShell

Security Tools

Cloud Platforms

Containerization

Problem-Solving

Communication

Education

Certified DevSecOps Professional (CDP)

Certified Information Systems Security Professional (CISSP)

AWS Certified Security Specialty

Tools

AWS CodeBuild

Jenkins

GitLab

Azure DevOps

Terraform

CloudFormation

Ansible

Docker

Kubernetes

Job description

Social network you want to login/join with:

The JD Group is a leading omnichannel retailer of Sports Fashion, Street & Premium Fashion, Outdoors and Gyms with over 90,000 colleagues over 4,500 stores across several retail fascia's in over 36 countries around the world.

We are an equal opportunities employer who embraces and values differences. We recognise the importance of an inclusive workplace culture in which everyone can thrive irrespective of their background or identity.

To be a part of this successful and continuously growing company, you will have the desire to ingrain our strategic goals of being a people first, a digital leader and customer focused organisation which provides operational excellence and is continuous with identifying new areas of growth into our day-to-day.

Job Title: DevSecOps Engineer

Location: Bury

Job Type: Full-Time

Job Description: We are seeking a skilled and motivated DevSecOps Engineer to join our growing Information Security team. The ideal candidate will have a strong background in both development and security operations, with a passion for integrating security practices into the DevOps process. As a DevSecOps Engineer, you will play a critical role in ensuring the security and integrity of our software development lifecycle.

Key Responsibilities:

• Implement and manage security tools and practices within the CI/CD pipeline.
• Collaborate with development, operations, and security teams to integrate security measures throughout the software development lifecycle.
• Conduct security assessments and vulnerability testing to identify and mitigate risks.
• Develop and maintain automated security testing scripts and tools.
• Monitor and respond to security incidents and alerts.
• Ensure compliance with industry standards and regulations.
• Provide guidance and training to development teams on secure coding practices.
• Continuously improve security processes and practices.

Skills & Experience:

• Proven experience as a DevSecOps Engineer or in a similar role.
• Strong understanding of DevOps principles and practices.
• Experience with CI/CD tools such as AWS CodeBuild, Jenkins, GitLab, Azure DevOps
• Proficiency in scripting languages such as Python, PowerShell.
• Knowledge of security tools and frameworks (, OWASP, SCA, SAST, DAST).
• Familiarity with one or more cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).
• Excellent problem-solving skills and attention to detail.
• Strong communication and collaboration skills.

Preferred Qualifications:

• Relevant certifications such as Certified DevSecOps Professional (CDP), Certified Information Systems Security Professional (CISSP), or AWS Certified Security Specialty.
• Experience with infrastructure as code (IaC) tools like Terraform, CloudFormation, Ansible.
• Knowledge of security frameworks, regulatory requirements and compliance standards ( NIST, PCI DSS, GDPR).