DevSecOps Engineer

SoCode Recruitment; Cambridge; Hybrid; GBP 45,000 - 60,000; Full time

Benefits offered by this job

SC Clearance preferable

No Sponsorship option

Job summary

SoCode Recruitment is assisting an established Cambridge technology business to hire a DevSecOps Engineer for a hands-on, mid-level role. You’ll work across embedded, desktop and web products, building security into development and release processes, with 3 days per week on-site in Cambridge.

You should bring 3+ years in DevOps/DevSecOps, strong Linux and CI/CD experience, plus Python and Bash scripting. Knowledge of security tooling and SBOMs is a plus, with opportunity to grow in security

Qualifications

• 3+ years in DevOps/DevSecOps or similar roles.
• Solid Linux experience and hands-on CI/CD implementation.
• Proficient in Python and Bash scripting.
• Experience with security tooling and CVE management.
• Familiar with containerisation and infrastructure automation.
• Comfortable collaborating with development teams.

Responsibilities

• Build and improve CI/CD pipelines across GitLab CI / TeamCity.
• Integrate security scanning (SAST, SCA, DAST, SBOMs).
• Investigate CVEs and remediate with teams.
• Harden Linux systems and support security/compliance.
• Maintain Linux and Windows build infrastructure.
• Work with Docker, IaC and automated tooling.
• Improve software supply-chain security and release processes.
• Review changes and create runbooks/documentation.

Skills

Linux

CI/CD

Python

Bash

Git

Security fundamentals

Troubleshooting

Tools

GitLab CI

TeamCity

Jenkins

GitHub Actions

Docker

Job description

DevSecOps Engineer – Cambridge

£45,000 - £60,000 (depending on experience level)

3 days per week in Cambridge

No Sponsorship option

SC Clearance preferable

I’m working with an established technology business in Cambridge that’s looking to bring in a DevSecOps Engineer to join their growing DevOps team. This is a hands-on, mid-level role for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security. You’ll be working across embedded, desktop and web products, helping build security into the development and release process.

What you’ll be doing:

• Build and improve CI/CD pipelines across GitLab CI / TeamCity
• Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs
• Investigate CVEs and work with development teams on remediation
• Harden Linux systems and support security/compliance requirements
• Maintain Linux and Windows build infrastructure
• Work with Docker, infrastructure-as-code and automated tooling
• Help improve software supply-chain security, secrets management and release processes
• Review infrastructure, pipeline and application changes
• Create clear technical documentation and runbooks

What they’re looking for:

• 3+ years in DevOps, DevSecOps, Platform, Build/Release or similar
• Strong hands-on Linux experience
• Good CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar
• Strong Python and Bash scripting
• Working knowledge of Docker
• Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management
• Good understanding of security fundamentals including least privilege, secrets management and patching
• Comfortable working with Git and troubleshooting unfamiliar systems

Useful but not essential:

• NIST, DISA STIGs, CIS, FIPS, ISO 27001 or Cyber Essentials Plus
• Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP
• Terraform or Ansible
• AWS / VMware / Proxmox
• Windows build environments and PowerShell
• Embedded Linux
• C/C++, Rust, .NET or JavaScript/TypeScript build environments
• Experience within defence, aerospace or another regulated environment