DevSecOps Engineer

Richemont; West Malling; On-site; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking a skilled DevSecOps Engineer to enhance software security within their growing Technology team. In this role, you will integrate security practices into the DevOps lifecycle, automate security measures, and monitor security incidents. This position requires a detail-oriented problem solver who can work collaboratively with various teams to ensure robust security throughout the software development process. Join a company that values personal growth and offers a supportive environment where you can thrive and contribute significantly to exciting projects.

Benefits

Private healthcare and dental

Competitive pension scheme

Increasing annual leave

Cycle to work scheme

Employee Assistance programme

Income Protection

Life Assurance

Extensive group discounts

Qualifications

• 3-5 years experience in DevSecOps or related roles.
• Strong knowledge of security frameworks and tools.
• Ability to prioritize tasks under tight deadlines.

Responsibilities

• Integrate security practices into the DevOps lifecycle.
• Automate security measures and monitor incidents.
• Collaborate with teams to enhance application security.

Skills

DevSecOps

Security frameworks (OWASP, Snyk)

Problem-solving

Team collaboration

Attention to detail

Communication skills

Ability to work under pressure

Mentoring

Education

Bachelor's degree in Computer Science or related field

Certified Information Systems Security Professional (CISSP)

Tools

AWS

Azure DevOps

GitHub

DataDog

WIZ

Snyk

Job description

We’re looking for an experienced, highly motivated DevSecOps Engineer to help ensure the security and efficiency of the software products produced by our growing Technology team and organization. As a DevSecOps Engineer within the Development team here at Watchfinder, you will integrate security practices into the DevOps processes, automate security measures, and monitor/manage security incidents across Watchfinder products.

We’re looking for an individual who puts security first and sees the value in a robust DevSecOps process. You will work closely with the Dev Team Lead and the wider development team to understand project requirements to implement and maintain security measures. A problem solver, with an eye for detail and the ability to think of scenarios that others might not. You will own the security of the user journey from planning phase to the release to the live environment.

Roles & Responsibilities

• Integrating security practices into the DevOps lifecycle
• Automating security measures and processes
• Assist the Development, Engineering & Product teams within Squads in assessing and improving security of the applications
• Work with developers and support personnel to identify security vulnerabilities and raise issues where appropriate
• Monitor progress of projects and security incident triage
• Participate in feature planning sessions, release activities, development and project meetings
• Understanding and maintaining software security for features built by defining security plans and approaches ensuring comprehensive security testing is completed
• Working closely with the Product team to fully understand the business requirements to ensure security plans are fit for purpose and are fully scoped with timelines for completion
• Ensure that all documentation such as written security plans and scripts are all completed
• Staying abreast with the latest, state-of-the-art security tools and automation platforms/techniques
• Ensure delivery of high standards, documentation, and service levels

Essential Skills:

• 3-5 years’ experience in DevSecOps or related roles
• Knowledge and working experience of security frameworks and tools - OWASP, Snyk, etc.
• Good team player and able to work on own initiative
• Proven experience in mentoring other team members
• Proven ability of establishing strong, effective working relationships at all levels
• Strong organization, accuracy, and attention to detail
• Strong sense of urgency and dedicated work ethic
• Ability to work under tight deadlines and to prioritize under pressure
• Knowledge of development, security, and quality assurance best practices and methodologies
• Ability to receive and relay information through written and verbal communication
• Ability to think outside the box e.g. Edge cases

Desirable Skills:

• Wiz
• Amazon Web Services
• DevOps Automation: Azure DevOps, GitHub, etc
• Proven experience with the following technologies: Angular, JavaScript, Typescript, SCSS, HTML5, Unit Testing, TDD, Web Pack, C#, MVC, Python, Yaml, REST web services, and SQL/T-SQL
• Security tools: WIZ, Snyk, KICS, Qodana
• Linters and formatters: ESLint, dprint, Biome, semantic versioning, conventional commits
• Familiarity with DataDog or Site 24x7 is a bonus
• Familiarity with API Security, Container Security, AWS Cloud Security
• Familiarity with Amazon AWS Policy, Configuration, WAF, GuardDuty and Security Management tools
• Certified Information Systems Security Professional (CISSP) or similar certification

Why work for Watchfinder?

Firstly, what makes Watchfinder a great place to work is the people! Whether that be within your immediate team or across other areas of the business, there really is a family feel across the whole company.

If personal growth and development is high on your priority list, then Watchfinder is the place for you. We’ve had numerous success stories throughout the business of our staff furthering and developing their careers, proving to be integral contributors to the company.

To be part of this exciting journey, apply now!

Our Benefits & Incentives

• Private healthcare and dental
• Competitive pension scheme
• Holiday scheme – Increasing annual leave
• Cycle to work scheme
• Employee Assistant programme
• Income Protection
• Life Assurance
• Extensive group discounts