DevSecOps Engineer

Raytheon Technologies; Malvern; Hybrid; GBP 50,000 - 75,000; Full time

Job summary

A defense and aerospace technology firm is seeking a skilled developer for a full-time DevSecOps role in Malvern. You will lead the integration of security practices into the software development life cycle while automating security tests. Ideal candidates will have expertise in SE Linux, DISA STIG securing protocols, and modern container technologies like Docker. The role offers competitive salary and benefits in a hybrid work environment.

Benefits

Competitive salaries

25 days holiday plus statutory holidays

Pension Scheme with company contributions

Discretionary bonus scheme

Private Medical Insurance

Qualifications

• Experience of securing Windows Server with DISA STIG protocols.
• Experience with configuration and securing rootless containers.
• Familiar with Kerberos authentication of file shares.

Responsibilities

• Lead integration of security practices into the software development life cycle.
• Automate security testing in development and integration environments.
• Communicate effectively across software development functions.

Skills

Experience of SE Linux application and Linux security lockdown

Experience of securing systems with DISA STIG process

Experience with static analysis tools like Sonar and Fortify

Test automation focusing on security testing

OCI container implementation including Docker/Podman

Tools

Atlassian Bitbucket

Jira

Jenkins

Docker

Kubernetes

Job description

Overview

Date Posted: 2025-08-21

Country: United Kingdom

Location: Rosemount Aerospace Limited, Malvern Hills Science Park, Geraldine Road, Malvern, WR14 3SZ

Position Role Type: Unspecified

Do you want to be a part of something bigger? A team whose impact stretches across the world while potentially defining the technical direction we take.

At Raytheon UK, we take immense pride in being a leader in defence and aerospace technology. As an employer, we are dedicated to fueling innovation, nurturing talent, and fostering a culture of excellence.

Our customers depend on us for intelligent and secure communications, missionized systems for specialized aircraft and spacecraft and collaborative space solutions. By joining our team, you\'ll have your own critical part to play in ensuring our customers succeed today while anticipating their needs for tomorrow. Are you up for the challenge? Join our mission today.

Joining our team means being part of an organisation that shapes the future of national security whilst investing in your growth and personal development. We provide a collaborative environment, abundant opportunities for professional development, and a profound sense of purpose in what we do. Together, we are not just advancing technology; we\'re building a community committed to safeguarding a safer and more connected world.

Providing DevSecOps at scale, Artificial Intelligence, Machine Learning, cyber and geospatial intelligence capabilities to support the defence, intelligence and cyber sectors. Collaborating with customers and suppliers to deliver secure, mission critical systems using the latest technologies and innovations.

What You Will Do

• You will bring the disparate DevOps/DevSecOps functions into a dedicated role
• You will lead the integration of security practices into the software development life cycle (SDLC)
• You will automate security testing in the software development and integration environment, and the programme integration and test environment
• You will understand threat modelling, risk assessment and vulnerability management
• You will leverage your knowledge of static analysis tools such as Sonar and Fortify (or equivalents)
• You will ensure that systems are safe and secure against cyber security threats
• You will display strong communication and collaboration skills

• You will communicate effectively across software development functions, promoting our \'security culture\' that benefits from your own skills and experiences.

What You Will Learn

• You will gain exposure to development that will enhance your technical acumen, broaden your user group experience and accelerate your professional development.
• You will gain industry experience that is second to none.
• You will access worldwide professional development and cross functional collaboration tools
• You will open the door to opportunities including tech tracks and fellow programs that enable you to be super power individual contributors, an expert in your field OR even take a role in leadership. Depending on your desire.

Qualifications/Experience You Must Have

• Experience of SE Linux application and Linux security lockdown in RHEL v9 or later, and Ubuntu Pro
• Experience of securing systems using Defence Information Systems Agency (DISA) Security Technical Implementation Guide (STIG) process
• Experience of secure Windows Server lockdown with DISA STIG protocols
• Experience of configuration and securing of rootless containers connected to NAS
• Experience of integration of Windows Active Directory with secure RHEL and Ubuntu Pro
• Experience of Kerberos authentication of file shares on NAS
• OCI container implementation including Docker/Podman or Kubernetes
• Test automation, with particular focus on automated security testing in both software development and integration environments.
• Experience with static analysis tools like Sonar and Fortify.

Qualifications/Experience We Prefer

• Any knowledge areas related to NIST, CIS, ISO27001 or FIPS standards
• Working knowledge and experience of
  • Atlassian Bitbucket and Jira
  • JUnit and the Serenity BDD framework
  • JFrog Artifactory and X-Ray
  • CMake, Gradle and npm.
  • Jenkins, Sonarqube, Docker
• Desirable knowledge and experience:
  • Ansible, Puppet, Chef
  • Terraform
  • GitLabs
  • Prometheus/Grafana
  • Threat modelling, risk and vulnerability management

The Where & When

This is a full-time role (38 hours per week) based in Malvern. Since March 2020, we have adopted a flexible, hybrid approach to our work that has allowed us to include more regionally distant workers. You will be expected to come to the Malvern office when required, but typical frequency does not exclude distance working.

You will report to the Engineering Manager who is also based in Malvern.

What We Offer

• Competitive salaries.
• 25 days holiday + statutory public holidays, plus opportunity to buy and sell up to 5 days (38hr)
• Contributory Pension Scheme (up to 10% company contribution)
• Company bonus scheme (discretionary)
• 6 times salary \'Life Assurance\' with pension.
• Flexible Benefits scheme with extensive salary sacrifice schemes, including Health Cashplan, Dental, and Cycle to Work amongst others.
• Enhanced sick pay.
• Enhanced family friendly policies including enhanced maternity, paternity & shared parental leave.
• Private Medical Insurance

RTX adheres to the principles of equal employment. All qualified applications will be given careful consideration without regard to ethnicity, color, religion, gender, sexual orientation or identity, national origin, age, disability, protected veteran status or any other characteristic protected by law.

Privacy Policy and Terms:

Click on this link to read the Policy and Terms