DevSecOps Engineer - ONSITE

Talkspirit; Loughton; On-site; GBP 90,000 - 104,000; Full time

Job summary

A leading finance and credit company is seeking a DevSecOps Engineer for an initial 6-month contract at their Debden offices. The role focuses on securing Azure infrastructure, integrating security automation, and mentoring an internal engineer. Candidates must have strong expertise in Azure security and be able to work onsite Monday to Friday.

Benefits

Free onsite gym

Parking

Qualifications

• Strong expertise in Azure security and Microsoft Defender.
• Experience with SOAR technologies and vulnerability assessments.
• Proficiency with Terraform and IaC security automation.

Responsibilities

• Architect and secure Azure infrastructure using Terraform.
• Design and optimize Azure DevOps pipelines with embedded security.
• Conduct vulnerability assessments and penetration testing.

Skills

Azure security

Penetration testing

Vulnerability assessments

Terraform

Scripting (Python, Bash, PowerShell)

Interpersonal skills

Education

Certifications such as Azure Security Engineer, CISSP, OSCP, CCSP

Job description

Join to apply for the DevSecOps Engineer - ONSITE role at Talkspirit.

Get AI-powered advice on this job and more exclusive features.

Location: Mon-Fri onsite in Debden IG10

Offices a 5-minute walk from Debden tube station (Central line).

Salary: Approx. £90k + pension + health benefits

Additional perks include free onsite gym & parking.

Please only apply if you can work from their Debden offices Monday-Friday. Hybrid or remote working is not available.

Company Overview

Established in 2009 and regulated by the FCA, this multi-award-winning finance & credit company has a proven track record for customer and employee satisfaction, with a Trustpilot rating of 4.8/5 and over 33,500 online reviews. They pride themselves on customer service and responsible lending.

Role Summary

This is an initial 6-month contract for an experienced DevSecOps Engineer focused on securing Azure infrastructure, integrating security automation, PCI DSS compliance, vulnerability testing, and incident response. The role involves developing and maintaining secure Azure DevOps pipelines and Infrastructure as Code (IaC) using Terraform, mentoring an internal engineer, and managing Sentinel, Defender, and SOAR solutions for automated threat response. Collaboration with third-party support is also key.

Key Responsibilities

1. Architect and secure Azure infrastructure using Terraform.
2. Design and optimize Azure DevOps pipelines with embedded security.
3. Leverage Azure Security Centre, Microsoft Defender, and Sentinel for security monitoring.
4. Oversee SOAR solutions including SOC Prime.
5. Manage Web Application Firewalls (WAF) and Intrusion Prevention Systems (IPS).
6. Conduct vulnerability assessments and penetration testing.
7. Ensure PCI DSS compliance through audits and risk assessments.
8. Implement DNS security solutions.
9. Develop incident response processes with third-party support.
10. Develop SIEM solutions, logging, and threat intelligence strategies.
11. Define and enforce security policies and procedures.
12. Mentor internal engineers and coordinate with external security partners.
13. Ensure comprehensive documentation for post-contract continuity.

Minimum Requirements

• Strong expertise in Azure security, Microsoft Defender, and Sentinel.
• Experience with SOAR technologies, penetration testing, and vulnerability assessments.
• Proficiency with Terraform and IaC security automation.
• Knowledge of DevOps pipelines, PCI DSS, SIEM, and security frameworks.
• Scripting skills (Python, Bash, PowerShell).
• Excellent interpersonal skills and ability to work onsite daily.

Preferred Qualifications

• Certifications such as Azure Security Engineer, CISSP, OSCP, CCSP.
• Experience with container security (Docker, Kubernetes).
• Knowledge of NIST, ISO 27001, SOC 2, and Zero Trust principles.

Additional Notes

Please only apply if you are able to work from their Debden offices Monday-Friday. No hybrid or remote options available.

NB: For non-UK citizens, sponsorship is not available. Visa must allow unrestricted work in the UK for at least 5 years.

By applying, you consent to Profile 29 processing your data for recruitment purposes. Privacy policy at: profile-29.com/privacy