DevSecOps Engineer: Secure CI/CD & App Security (UK)

MPower Plus; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

MPower Plus is seeking a DevOps Engineer with strong DevSecOps and application security experience to embed security controls throughout the software delivery lifecycle. The role focuses on designing and maintaining secure CI/CD pipelines and integrating SAST, DAST and dependency scanning.

Key responsibilities include implementing security gates, conducting code reviews, and addressing vulnerabilities across the development lifecycle.

Qualifications

• Strong DevOps/DevSecOps experience across the software delivery lifecycle.
• Hands-on security of CI/CD pipelines.
• Experience with SAST, DAST and dependency scanning.
• Experience with Policy as Code.
• Ability to configure security gates and controls in pipelines.
• Experience in application security and code reviews.
• Understanding of secure software delivery.

Responsibilities

• Design and maintain secure CI/CD pipelines.
• Implement SAST, DAST and dependency scanning.
• Implement Policy as Code.
• Configure security gates and controls within pipelines.
• Perform application security code reviews.
• Identify and address security vulnerabilities within the development lifecycle.

Skills

DevSecOps

CI/CD pipelines

SAST

DAST

Dependency scanning

Policy as Code

Application security

Job description

MPower Plus is seeking a DevOps Engineer with strong DevSecOps and application security experience to embed security controls throughout the software delivery lifecycle. The role focuses on designing and maintaining secure CI/CD pipelines and integrating SAST, DAST and dependency scanning.

Key responsibilities include implementing security gates, conducting code reviews, and addressing vulnerabilities across the development lifecycle.