DevSecOps Engineer

Richemont; West Malling; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading luxury goods company in the United Kingdom is seeking an experienced DevSecOps professional to enhance security practices within their development teams. The role involves integrating security into the DevOps lifecycle, automating processes, and mentoring team members. Candidates should have solid experience in security frameworks like OWASP and familiarity with various tools such as AWS and Azure DevOps. The position offers a competitive benefits package and opportunities for personal growth and career development.

Benefits

Private healthcare and dental

Competitive pension scheme

Increased annual leave

Cycle to work scheme

Employee Assistance programme

Income Protection

Life Assurance

Qualifications

• 3-5 years' experience in DevSecOps or related roles.
• Proficient in security frameworks and tools like OWASP, Snyk.
• Ability to mentor team members and establish effective relationships.

Responsibilities

• Integrate security practices into the DevOps lifecycle.
• Automate security measures and processes.
• Monitor security vulnerabilities and incidents.

Skills

DevSecOps experience

Team collaboration

Attention to detail

Ability to work under tight deadlines

Education

3-5 years in DevSecOps or related roles

Tools

AWS

Azure DevOps

Snyk

Angular

Python

Job description

Since Watchfinder & Co. was first founded in 2002, it has grown to become the premier resource from which to buy and sell premium pre‑owned watches. With thousands of watches available from more than 50 brands, including Rolex, Omega, IWC and more, plus boutiques across the UK and a manufacturer certified service centre, Watchfinder has established itself as the top pre‑owned watch specialist.

How will you make an impact?

• Integrating security practices into the DevOps lifecycle
• Automating security measures and processes
• Assist the Development, Engineering & Product teams within Squads in assessing and improving security of the applications
• Work with developers and support personnel to identify security vulnerabilities and raise issues where appropriate
• Monitor progress of projects and security incident triage
• Participate in feature planning sessions, release activities, development and project meetings
• Understanding and maintaining software security for features built by defining security plans and approaches ensuring comprehensive security testing is completed
• Working closely with the Product team to fully understand the business requirements to ensure security plans are fit for purpose and are fully scoped with timelines for completion
• Ensure that all documentation such as written security plans and scripts are all completed
• Staying abreast with the latest, state‑of‑the‑art security tools and automation platforms/techniques
• Ensure delivery of high standards, documentation, and service levels

How will you experience success with us

• 3-5 years' experience in DevSecOps or related roles
• Knowledge and working experience of security frameworks and tools - OWASP, Snyk, etc.
• Good team player and able to work on own initiative
• Proven experience in mentoring other team members
• Proven ability of establishing strong, effective working relationships at all levels
• Strong organization, accuracy, and attention to detail
• Strong sense of urgency and dedicated work ethic
• Ability to work under tight deadlines and to prioritize under pressure
• Knowledge of development, security, and quality assurance best practices and methodologies
• Ability to receive and relay information through written and verbal communication
• Ability to think outside the box e.g. Edge cases

Desirable Skills:

• Wiz
• Amazon Web Services
• DevOps Automation: Azure DevOps, GitHub, etc
• Proven experience with the following technologies: Angular, JavaScript, Typescript, SCSS, HTML5, Unit Testing, TDD, Web Pack, C#, MVC, Python, Yaml, REST web services, and SQL/T‑SQL
• Security tools: WIZ, Snyk, KICS, Qodana
• Linters and formatters: ESLint, dprint, Biome, semantic versioning, conventional commits
• Familiarity with DataDog or Site 24x7 is a bonus
• Familiarity with API Security, Container Security, AWS Cloud Security
• Familiarity with Amazon AWS Policy, Configuration, WAF, GuardDuty and Security Management tools
• Certified Information Systems Security Professional (CISSP) or similar certification

Your journey with us

Our aim is to provide you a transparent interview process from the moment you apply for the role. It's important for us that you get to know us to ensure the role aligns to your future career objectives.

We provide all candidates with open‑door access to key people across the business so they can discuss opportunities, get a feel for our culture, and better understand how they can make an impact and be part of Watchfinder's exciting trajectory.

Interview Process

Intro Call with Talent Team: An introductory call with our in‑house talent team to learn more about your skills and experience in more detail.

1st Stage: Interview with our CIO to learn more about your skills, experience, and motivation for the role at Watchfinder. If successful after this stage, you will be sent a brief to prepare for the next stage.

Final Stage: Present the brief that you were provided before your interview to our CIO, Development Team Leader and HR Business Partner for Technology.

Our Benefits & Incentives

As well as a competitive salary we also offer a great benefits package:

• Private healthcare and dental
• Competitive pension scheme
• Holiday scheme - Increasing annual leave
• Cycle to work scheme
• Employee Assistant programme
• Income Protection
• Life Assurance

Why work for Watchfinder?

If personal growth and development is high on your priority list, then Watchfinder is the place for you. We've had numerous success stories throughout the business of our staff furthering and developing their careers, proving to be integral contributors to the company.

To be part of this exciting journey, apply now!