DevSecOps Engineer - Hybrid, 15% Bonus, Cloud Security

Hyra; England; Hybrid; GBP 30,000 - 60,000; Full time

Benefits offered by this job

Discretionary bonus up to 15%

Share save scheme

Pension

Annual leave

Hybrid working

Job summary

Hyra partners with a major UK retail business to recruit a DevSecOps Engineer in Leicestershire. The role is hybrid, with at least one day per week in the office, and offers a salary of £30,000 to £60,000 plus up to 15% bonus.

You will design and implement DevSecOps controls across the software delivery lifecycle, integrate security tooling into CI/CD, govern AWS and other cloud platforms, and develop security baselines and guardrails. Collaboration across teams is essential.

Qualifications

• 1–6 years in DevSecOps or related roles
• Experience with AWS and cloud security
• Experience IaC with Terraform, CDK or CloudFormation
• Experience CI/CD pipelines and DevOps practices
• Experience identifying and remediating security risks
• Collaborates with engineering teams to embed security in the lifecycle
• Python coding experience

Responsibilities

• Design and implement DevSecOps controls across the SDLC
• Integrate security tooling into CI/CD pipelines
• Secure multi-cloud environments (AWS, GCP)
• Develop cloud security baselines and guardrails
• Maintain CSPM/CNAPP controls
• Ensure deployments comply with security standards
• Support threat modelling and security reviews
• Assist with security investigations and incident response
• Support detection engineering initiatives

Skills

DevSecOps

Cloud security

AWS

CI/CD

Infrastructure as Code

Terraform

CloudFormation

CDK

Python

Threat modelling

Incident response

Automation

Tools

Terraform

CloudFormation

CDK

Job description

Hyra partners with a major UK retail business to recruit a DevSecOps Engineer in Leicestershire. The role is hybrid, with at least one day per week in the office, and offers a salary of £30,000 to £60,000 plus up to 15% bonus.

You will design and implement DevSecOps controls across the software delivery lifecycle, integrate security tooling into CI/CD, govern AWS and other cloud platforms, and develop security baselines and guardrails. Collaboration across teams is essential.