DevSecOps Engineer

Hyra; England; Hybrid; GBP 30,000 - 60,000; Full time

Benefits offered by this job

Discretionary bonus up to 15%

Share save scheme

Pension

Annual leave

Hybrid working

Job summary

Hyra partners with a major UK retail business to recruit a DevSecOps Engineer in Leicestershire. The role is hybrid, with at least one day per week in the office, and offers a salary of £30,000 to £60,000 plus up to 15% bonus.

You will design and implement DevSecOps controls across the software delivery lifecycle, integrate security tooling into CI/CD, govern AWS and other cloud platforms, and develop security baselines and guardrails. Collaboration across teams is essential.

Qualifications

• 1–6 years in DevSecOps or related roles
• Experience with AWS and cloud security
• Experience IaC with Terraform, CDK or CloudFormation
• Experience CI/CD pipelines and DevOps practices
• Experience identifying and remediating security risks
• Collaborates with engineering teams to embed security in the lifecycle
• Python coding experience

Responsibilities

• Design and implement DevSecOps controls across the SDLC
• Integrate security tooling into CI/CD pipelines
• Secure multi-cloud environments (AWS, GCP)
• Develop cloud security baselines and guardrails
• Maintain CSPM/CNAPP controls
• Ensure deployments comply with security standards
• Support threat modelling and security reviews
• Assist with security investigations and incident response
• Support detection engineering initiatives

Skills

DevSecOps

Cloud security

AWS

CI/CD

Infrastructure as Code

Terraform

CloudFormation

CDK

Python

Threat modelling

Incident response

Automation

Tools

Terraform

CloudFormation

CDK

Job description

This role is being handled by Via, a secure hiring platform used by employers to review candidates.

After applying, you will be invited to create your profile on the Via platform. Your profile stays anonymous until you match.

DevSecOps Engineer - Leicestershire (Hybrid) - £30,000-£60,000 + Bonus

Location: Leicestershire (hybrid - minimum 1 day per week in the office)

Salary: £30,000-£60,000 per year + up to 15% bonus

Start date: Flexible

About the role

We're delighted to be partnering with a major UK retail business to recruit a DevSecOps Engineer. This is a key role in making sure the business's technology is secure, reliable and easy for its engineering teams to work with.

You’ll collaborate across the business to build security into the software development process, strengthen cloud platforms and automate controls, while helping to create a culture where security is seen as an enabler rather than a blocker.

What you'll be doing

• Designing, implementing and improving DevSecOps controls throughout the software delivery lifecycle
• Integrating security tooling into CI/CD pipelines
• Securing and governing multi-cloud environments across AWS and GCP
• Developing cloud security baselines, guardrails and best practices
• Implementing and maintaining CSPM/CNAPP controls
• Making sure cloud deployments comply with security standards and policies
• Supporting threat modelling and security architecture reviews for cloud-native solutions
• Assisting with security investigations and incident response
• Supporting detection engineering initiatives

What we're looking for

• Experience in DevOps, cloud security, platform engineering or DevSecOps roles (ideally 1-6 years, but all levels considered)
• Cloud platform experience, particularly AWS
• Experience applying security principles within modern software development and cloud environments
• Infrastructure as Code and automation experience with tools such as Terraform, CDK or CloudFormation
• Experience with CI/CD pipelines and DevOps practicesExperience identifying, investigating and remediating security risks and vulnerabilities
• Experience working closely with engineering teams to embed security into the development lifecycle
• Python coding experience
• A collaborative approach and the ability to build positive relationships with technical and non-technical colleagues
• Natural curiosity and enjoyment of learning new technologies, tools and ways of working
• Ownership of problems, seeing them through to a successful outcome
• The ability to balance security, risk and business needs to make pragmatic decisions
• A passion for sharing knowledge and helping others grow

What would make you stand out

• Google Cloud Platform (GCP) experience
• Cloud security experience in a large-scale environment
• Experience with security testing, threat modelling or application security
• Experience building developer-focused tooling, guardrails or self-service platform capabilities
• Relevant cloud or security certifications

What's on offer

• £30,000-£60,000 per year, depending on experience
• Discretionary bonus of up to 15%
• Share save scheme
• Pension
• Annual leave
• Hybrid working, with a minimum of one day a week in the office

If you're a security-minded engineer who enjoys making things safer without slowing people down, we'd love to hear from you.