DevSecOps Engineer

La Fosse; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

La Fosse is looking for a hands-on DevSecOps Engineer to join our cloud platform team supporting a large-scale, consumer-facing digital environment. Based in Watford with 3 days onsite per week, the role spans web, mobile and retail platforms and focuses on strengthening security across an AWS-centric landscape.

You’ll implement security controls in AWS, embed security into CI/CD, work with GuardDuty and other services, translate InfoSec requirements into technical solutions, and own security

Qualifications

• Hands-on AWS/cloud platform engineering experience.
• Experience implementing cloud security controls and tooling.
• Experience securing CI/CD pipelines.
• Understanding of cloud security best practices and governance.
• Ability to explain security initiatives and outcomes.

Responsibilities

• Implement security controls and tooling across AWS cloud infrastructure.
• Embed security into CI/CD pipelines and DevOps practices.
• Work with AWS security services, including GuardDuty, to strengthen cloud security.
• Translate InfoSec requirements into technical solutions and platform improvements.
• Take ownership of security initiatives from requirements to implementation.
• Collaborate with platform engineers and security stakeholders to improve security without delaying delivery.

Skills

AWS security

Cloud engineering

CI/CD security

Security governance

Security outcomes

Tools

GuardDuty

Job description

• Location: Watford, with 3 days onsite per week.
• Focus: Hands-on DevSecOps, AWS security and cloud platform engineering.

I’m working on an opportunity for a hands-on DevSecOps Engineer to join a cloud platform team supporting a large-scale, consumer-facing digital technology environment.

Operating across web, mobile and retail platforms, this role will help strengthen security across a predominantly AWS environment, working at the intersection of Cloud Platform Engineering and Information Security.

What you’ll be doing:

• Implementing security controls and tooling across AWS cloud infrastructure.
• Embedding security into CI/CD pipelines and DevOps practices.
• Working with AWS security services, including GuardDuty, to strengthen cloud security.
• Translating InfoSec requirements into technical solutions and platform improvements.
• Taking ownership of security initiatives from initial requirements through to implementation.
• Working closely with platform engineers and security stakeholders to improve security without compromising delivery.

What I’m looking for:

• Strong hands-on AWS and cloud/platform engineering experience.
• Practical experience implementing cloud security controls and tooling.
• Experience securing CI/CD pipelines and integrating security into engineering workflows.
• An understanding of cloud security best practices, governance and controls.
• The ability to explain security initiatives you’ve personally delivered, the technical implementation and the outcomes.

Azure experience would be beneficial, but AWS is the priority.