DevSecOps Engineer

JD Sports Fashion; Bury; On-site; GBP 45,000 - 75,000; Full time

Job summary

Ein etabliertes Unternehmen im Bereich Sportmode sucht einen talentierten DevSecOps Engineer, der die Sicherheitspraktiken in den Entwicklungsprozess integriert. In dieser Schlüsselrolle sind Sie dafür verantwortlich, Sicherheitswerkzeuge zu implementieren, Sicherheitsbewertungen durchzuführen und Schulungen für Entwicklungsteams anzubieten. Sie werden Teil eines dynamischen Teams, das sich der kontinuierlichen Verbesserung der Sicherheitsprozesse widmet und dabei hilft, die Integrität des Softwareentwicklungszyklus sicherzustellen. Wenn Sie eine Leidenschaft für Sicherheit und innovative Lösungen haben, ist dies die perfekte Gelegenheit für Sie, in einem wachsenden und inklusiven Umfeld zu arbeiten.

Benefits

Mitarbeiterrabatt auf JD Group Produkte

Persönliche Entwicklungsmöglichkeiten

Qualifications

• Erfahrung als DevSecOps Engineer oder in ähnlicher Rolle.
• Starkes Verständnis von DevOps-Prinzipien und Praktiken.

Responsibilities

• Implementierung und Verwaltung von Sicherheitswerkzeugen im CI/CD-Pipeline.
• Zusammenarbeit mit Entwicklungsteams zur Integration von Sicherheitsmaßnahmen.

Skills

DevSecOps Erfahrung

CI/CD Prinzipien

AWS CodeBuild

Jenkins

GitLab

Azure DevOps

Python

PowerShell

Sicherheitswerkzeuge (OWASP, SCA, SAST, DAST)

Cloud-Plattformen (AWS, Azure, GCP)

Containerisierungstechnologien (Docker, Kubernetes)

Problemlösungsfähigkeiten

Kommunikationsfähigkeiten

Education

Zertifizierung als DevSecOps Professional

CISSP

AWS Certified Security Specialty

Tools

Terraform

CloudFormation

Ansible

Job description

JD Sports- Head Office, Warwick House, Bury, Bury, United Kingdom Req #252

26 March 2025

Established in 1981 with a single store in the Northwest of England, the JD Group is a leading omni-channel retailer of Sports Fashion, Outdoors and Gyms with our colleagues working in stores across several retail fascias in many markets around the world.

JD Sports Fashion Plc was listed on the London Stock Exchange in 1996 and has been a FTSE100 publicly quoted company since 2019 and continues to grow in the UK and internationally.

We want to be the leading global omnichannel retailer in the sports and outdoor industry. To be a part of this successful company and help us to achieve this you will have the desire to ingrain our strategic goals of being a people-led, innovative and customer-focused organisation which provides operational excellence whilst identifying new areas of growth as part of our day to day objectives.

The Company:

The JD Group is a leading omnichannel retailer of Sports Fashion, Street & Premium Fashion, Outdoors and Gyms with over 90,000 colleagues over 4,500 stores across several retail fascia's in over 36 countries around the world.

We are an equal opportunities employer who embraces and values differences. We recognise the importance of an inclusive workplace culture in which everyone can thrive irrespective of their background or identity.

To be a part of this successful and continuously growing company, you will have the desire to ingrain our strategic goals of being a people first, a digital leader and customer focused organisation which provides operational excellence and is continuous with identifying new areas of growth into our day-to-day.

Job Title: DevSecOps Engineer

Location: Bury

Job Type: Full-Time

Job Description: We are seeking a skilled and motivated DevSecOps Engineer to join our growing Information Security team. The ideal candidate will have a strong background in both development and security operations, with a passion for integrating security practices into the DevOps process. As a DevSecOps Engineer, you will play a critical role in ensuring the security and integrity of our software development lifecycle.

Key Responsibilities:

1. Implement and manage security tools and practices within the CI/CD pipeline.
2. Collaborate with development, operations, and security teams to integrate security measures throughout the software development lifecycle.
3. Conduct security assessments and vulnerability testing to identify and mitigate risks.
4. Develop and maintain automated security testing scripts and tools.
5. Monitor and respond to security incidents and alerts.
6. Ensure compliance with industry standards and regulations.
7. Provide guidance and training to development teams on secure coding practices.
8. Continuously improve security processes and practices.

Skills & Experience:

1. Proven experience as a DevSecOps Engineer or in a similar role.
2. Strong understanding of DevOps principles and practices.
3. Experience with CI/CD tools such as AWS CodeBuild, Jenkins, GitLab, Azure DevOps.
4. Proficiency in scripting languages such as Python, PowerShell.
5. Knowledge of security tools and frameworks (e.g., OWASP, SCA, SAST, DAST).
6. Familiarity with one or more cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).
7. Excellent problem-solving skills and attention to detail.
8. Strong communication and collaboration skills.

Preferred Qualifications:

1. Relevant certifications such as Certified DevSecOps Professional (CDP), Certified Information Systems Security Professional (CISSP), or AWS Certified Security Specialty.
2. Experience with infrastructure as code (IaC) tools like Terraform, CloudFormation, Ansible.
3. Knowledge of security frameworks, regulatory requirements and compliance standards (e.g. NIST, PCI DSS, GDPR).

We know our colleagues work tirelessly to make JD Sports the success it is today and in turn, we offer them some amazing benefits including staff Discount On JD Group and other brands within the organisation and personal development opportunities to learn and develop at work.