DevSecOps Engineer

Immediate; City Of London; Hybrid; GBP 75,600 - 92,400; Full time

Benefits offered by this job

Relaxed working environment

Supportive well-being initiatives

25 days holiday plus birthday day off

Tailored training and development

Flexible / hybrid working

Cycle to work scheme

Enhanced family policies

Modern office with collaborative spaces

Job summary

A leading media company in London seeks a DevSecOps Engineer to enhance platform security and resilience. The role requires expertise in AWS, CI/CD automation, and collaboration with developers. Ideal candidates will have a strong grasp of cloud infrastructure and security best practices, contributing to a progressive culture focused on development and well-being. This full-time position offers a competitive salary and excellent benefits.

Qualifications

• Strong background in cloud infrastructure, especially AWS.
• Proven experience with CI/CD automation and infrastructure-as-code.
• Proficiency in Docker and Kubernetes for managing production workloads.
• Solid understanding of security frameworks and common vulnerabilities.
• Experience with monitoring tools like Prometheus, Grafana.
• Knowledge of Linux systems, performance tuning, and hardening.
• Strong grasp of networking and security protocols.
• Familiarity with code security tools and their integration.

Responsibilities

• Design, build, and maintain secure and scalable infrastructure in AWS.
• Embed security into CI/CD pipelines including SAST/DAST scanning.
• Collaborate with teams to promote DevSecOps practices.
• Conduct security assessments and recommend remediations.
• Manage DNS, CDN, firewalls, and load balancers.
• Respond to and resolve security incidents, driving improvements.
• Keep documentation current, including runbooks and protocols.
• Stay abreast of industry trends and new DevSecOps tools.

Skills

Cloud infrastructure (AWS)

CI/CD automation

Containerisation (Docker, Kubernetes)

Security frameworks (CIS, OWASP)

Application and infrastructure monitoring

Linux-based systems (LAMP stack)

Networking and security protocols

Code security tools

Problem-solving skills

Communication and collaboration

Job description

Base pay range

DevSecOps Engineer (up to £84,000)

Immediate is home to some of the biggest and most loved consumer brands in the UK, including Radio Times, Good Food and BBC Gardeners World magazine. Our trusted, quality content reaches millions of people a month across digital, print, video, podcasts, apps and live events.

We're the destination for people looking to get more from the things they love. We're here to inspire, fuel, encourage and educate. Whether it's the big things, or the little things; from reaching fitness goals to savouring good food, cultivating outdoor spaces, or enjoying the latest TV sensation we help bring our audiences joy!

About the role

We are seeking a DevSecOps Engineer to join our growing Platforms & Security team. This is a hands‑on role for someone passionate about automation, cloud operations, and security by design. You will be responsible for ensuring our platforms, products, and infrastructure are secure, resilient, and scalable while working closely with developers, QA, and product teams.

Responsibilities

• Design, build, and maintain secure and scalable infrastructure in AWS using Terraform, Kubernetes, and Docker.
• Embed security into the CI/CD pipeline (Jenkins, GitHub Actions, CodePipeline) including SAST/DAST and dependency scanning.
• Collaborate with developers and product teams to promote DevSecOps practices, threat modelling, and secure coding standards.
• Conduct security assessments of applications, services, and infrastructure, identifying vulnerabilities and recommending remediation.
• Operate, tune, and extend monitoring, logging, and alerting systems for both performance and security.
• Manage DNS, CDN, caching, firewalls, load balancers, and WAFs to ensure secure and performant web delivery.
• Respond to and resolve security incidents and platform issues, driving continuous improvement and automation of responses.
• Keep documentation current, including runbooks, incident playbooks, and security procedures.
• Stay ahead of industry trends, emerging threats, and new DevSecOps tools.

Requirements

• Strong background in cloud infrastructure (AWS preferred: EC2, Lambda, RDS, Route53, ELBs, EKS).
• Proven experience with CI/CD automation and infrastructure‑as‑code (Terraform, Ansible, Jenkins, Git/GitHub).
• Proficiency in containerisation (Docker, Kubernetes) and managing production workloads.
• Solid understanding of security frameworks (CIS, OWASP) and common vulnerabilities (OWASP Top 10, misconfigurations, supply chain risks).
• Experience with application and infrastructure monitoring (e.g., Prometheus, Grafana, ELK, CloudWatch).
• Knowledge of Linux‑based systems (LAMP stack, Nginx, Varnish, MySQL/Postgres, Mongo) with performance tuning and hardening experience.
• Strong grasp of networking and security protocols (TCP/IP, SSL/TLS, DNS, NAT, firewalls, load balancers, WAFs).
• Familiarity with code security tools (SAST, DAST, dependency scanners) and integrating them into pipelines.
• Excellent problem‑solving, communication, and cross‑team collaboration skills.
• Disaster recovery process and GDPR awareness.

Desired

• Knowledge of PCI DSS.

Benefits

• A relaxed working environment with regular socials including a summer festival.
• Supportive well‑being initiatives and benefits, talks & workshops, and Mental Health First Aiders & Champions.
• 25 days holiday plus a day for your birthday. Our offices will be closed between Christmas and New Year's which are in addition to your annual entitlement.
• Tailored training and development through our in‑house learning platform and LinkedIn Learning.
• A progressive and transparent culture focused on your development.
• Flexible / hybrid working plus early finish Fridays.
• Cycle to work scheme.
• Enhanced Family Policies including paternity, adoption and surrogacy leave. We also provide a pregnancy loss, fertility, and carers policy.
• Competitive pension plans and Life Assurance.
• A newly renovated modern office with lots of collaborative spaces.

Seniority level

Mid‑Senior level

Employment type

Full‑time

Equal Opportunity Employer

Immediate is an equal opportunities employer. We'll never treat anyone less favourably because of their sex, gender reassignment, pregnancy and maternity, marital/civil partnerships, sexual orientation, race, nationality, ethnic origin, age, religion or belief or disability. We're also committed to supporting applications from those who are returning to work following a career break, maternity leave or caring responsibilities.