DevSecOps Engineer

Dunelm; Leicester; Hybrid; GBP 70,000 - 90,000; Full time

Job summary

Dunelm, the UK's leading homewares retailer, is recruiting for a DevSecOps Engineer in Leicester. The role focuses on securing cloud platforms, building security into CI/CD pipelines, and automating controls across AWS and Google Cloud.

Expect a hands-on environment with on-call rota and close collaboration with product and engineering teams. You will implement and maintain CSPM/CNAPP guards, develop cloud baselines, and guide security decisions across multi-cloud deployments.

Qualifications

• Hands-on experience across cloud security, CI/CD pipelines, infrastructure as code, and vulnerability management.
• Experience with AWS and/or GCP.
• Ability to balance security with business needs and timelines.

Responsibilities

• Design, implement and improve DevSecOps controls across the Software Delivery Lifecycle.
• Integrate security tooling into CI/CD pipelines.
• Secure and govern multi-cloud environments across AWS and GCP.
• Develop cloud security baselines and guardrails.
• Assist with security investigations and incident response.

Skills

DevSecOps

Cloud Security

Automation

Security Architecture

Tools

AWS

GCP

Terraform

CloudFormation

CDK

Job description

And there's no feeling like helping people create the joy of feeling truly at home. At Dunelm, that's what we do. We're the UK's number one choice for homewares because we make home life lovelier for our customers. And we've crafted a workplace that feels just as welcoming - where you can bring your ideas, be yourself, and feel right at home.

Work your way, together

We're a hybrid business, which means you'll have flexibility alongside time together with your team. In this role, you can expect a minimum of 1 day per week in our Leicester Office helping you stay connected, collaborate and do your best work for our customers.

The DevSecOps team helps make sure Dunelm's technology is secure, reliable and easy for our engineering teams to use. We work across the business, partnering with product and engineering teams to build security into the software development process, improve our cloud platforms, automate controls, and remove friction so teams can deliver great products safely and quickly.

We're a team that believes security works best when it's an enabler, not a blocker and automation is the key. Whether we're creating guardrails in AWS, expanding our use of Google Cloud, improving till security, or helping teams solve security challenges from a range of technologies, our focus is on making the right thing the easy thing.

Once you've settled in, you will join the 24x7 on call rota to respond to any security incidents.

What you'll be doing

This role requires hands-on experience across cloud security, CI/CD pipelines, infrastructure as code, vulnerability management. No two days are the same, as the technical security team, DevSecOps covers all areas of the business advising on security outcomes, for example; tills and self-checkout.

Some of the key areas are:

• Design, implement and improve DevSecOps controls throughout the Software Delivery Lifecycle.
• Integrate security tooling into CI/CD pipelines.
• Secure and govern multi-cloud environments across AWS and GCP.
• Develop cloud security baselines, guardrails, and best practices.
• Implement and maintain CSPM/CNAPP controls.
• Ensure cloud deployments comply with security standards and policies.
• Support threat modelling and security architecture reviews for cloud-native solutions.
• Assist with security investigations and incident response activities.

What we'll look for in you

We're looking for someone who's passionate about building secure, scalable technology and enjoys working with others to solve complex problems. You'll be at your best in this role if you're curious, collaborative and keen to keep learning.

You'll be a great fit if you have experience with:

• Working in DevOps, Cloud Security, Platform Engineering, or DevSecOps roles.
• Cloud platforms, particularly AWS.
• Applying security principles within modern software development and cloud environments.
• Infrastructure as Code and automation tools such as Terraform, CDK or CloudFormation
• CI/CD pipelines and DevOps practices.
• Identifying, investigating and remediating security risks and vulnerabilities.
• Working closely with engineering teams to embed security into the development lifecycle.
• Python coding
• Have a collaborative mindset and can build positive relationships with technical and non-technical colleagues.
• Are naturally curious and enjoy learning new technologies, tools and ways of working.
• Take ownership of problems and see them through to a successful outcome.
• Can balance security, risk and business needs to make sensible, pragmatic decisions.
• Enjoy sharing knowledge and helping others grow.

It would be a bonus if you have experience with:

• Cloud security in a large-scale environment.
• Security testing, threat modelling or application security practices.
• Building developer-focused tooling, guardrails or self-service platform capabilities.
• Relevant cloud or security certifications.

Most importantly, don't worry if your experience doesn't match every item on this list. If you're excited by the opportunity, enjoy learning, and believe you can make a positive impact, we'd love to hear from you.