DevSecOps Engineer

Via; England; Hybrid; GBP 30,000 - 60,000; Full time

Benefits offered by this job

Share save scheme

Pension

Annual leave

Hybrid working

Job summary

Via is partnering with a major UK retailer to recruit a DevSecOps Engineer in Leicestershire. The role emphasizes embedding security into the software delivery lifecycle and strengthening cloud platforms to enable engineering teams.

You will design and implement security controls, automate CSPM/CNAPP tasks, and contribute to threat modelling and incident response across AWS and GCP in a hybrid setup.

Qualifications

• Experience in DevSecOps, cloud security or platform engineering.
• Hands-on with IaC and automation tools such as Terraform, CDK or CloudFormation.
• Experience with CI/CD pipelines and security practices.
• Ability to work with engineering teams to embed security into the lifecycle.

Responsibilities

• Design, implement and improve DevSecOps controls across the software delivery lifecycle.
• Integrate security tooling into CI/CD pipelines.
• Secure and govern multi‑cloud environments (AWS/GCP).
• Develop cloud security baselines and guardrails.
• Maintain CSPM/CNAPP controls and ensure policy compliance.
• Support threat modelling and security architecture reviews.

Skills

DevOps practices

Cloud security

CI/CD pipelines

Terraform

CDK

CloudFormation

Python

Security governance

Threat modelling

Cross-functional collaboration

Tools

AWS

GCP

Job description

DevSecOps Engineer – Leicestershire (Hybrid) – £30,000–£60,000 + Bonus

Location: Leicestershire (hybrid – minimum 1 day per week in the office)

Salary: £30,000–£60,000 per year + up to 15% bonus

About the role

We’re delighted to be partnering with a major UK retail business to recruit a DevSecOps Engineer. This is a key role in making sure the business’s technology is secure, reliable and easy for its engineering teams to work with.

You’ll collaborate across the business to build security into the software development process, strengthen cloud platforms and automate controls, while helping to create a culture where security is seen as an enabler rather than a blocker.

What you’ll be doing

• Designing, implementing and improving DevSecOps controls throughout the software delivery lifecycle
• Integrating security tooling into CI/CD pipelines
• Securing and governing multi-cloud environments across AWS and GCP
• Developing cloud security baselines, guardrails and best practices
• Implementing and maintaining CSPM/CNAPP controls
• Making sure cloud deployments comply with security standards and policies
• Supporting threat modelling and security architecture reviews for cloud-native solutions
• Assisting with security investigations and incident response

What we’re looking for

• Experience in DevOps, cloud security, platform engineering or DevSecOps roles (ideally 1–6 years, but all levels considered)
• Cloud platform experience, particularly AWS
• Experience applying security principles within modern software development and cloud environments
• Infrastructure as Code and automation experience with tools such as Terraform, CDK or CloudFormation
• Experience with CI/CD pipelines and DevOps practices
• Experience identifying, investigating and remediating security risks and vulnerabilities
• Experience working closely with engineering teams to embed security into the development lifecycle
• Python coding experience
• A collaborative approach and the ability to build positive relationships with technical and non-technical colleagues
• Natural curiosity and enjoyment of learning new technologies, tools and ways of working
• Ownership of problems, seeing them through to a successful outcome
• The ability to balance security, risk and business needs to make pragmatic decisions
• A passion for sharing knowledge and helping others grow

What would make you stand out

• Cloud security experience in a large-scale environment
• Experience with security testing, threat modelling or application security
• Experience building developer-focused tooling, guardrails or self-service platform capabilities
• Relevant cloud or security certifications

What’s on offer

• £30,000–£60,000 per year, depending on experience
• Discretionary bonus of up to 15%
• Share save scheme
• Pension
• Annual leave
• Hybrid working, with a minimum of one day a week in the office