DevSecOps Engineer | Secure Cloud, CI/CD & Automation

Dunelm; Leicester Forest East; Híbrido; GBP 85 000 - 110 000; Tempo integral

Resumo da oferta

Dunelm's DevSecOps team is seeking a hands-on security-focused engineer to protect our cloud-based software delivery.

You will design and implement DevSecOps controls across the SDLC, automate security tooling in CI/CD, and govern multi-cloud environments (AWS/GCP). This role is hybrid with a Leicester office presence and involves threat modelling, incident response, and ongoing security improvements.

Qualificações

• Experience in DevOps, Cloud Security, Platform Engineering, or DevSecOps roles.
• Cloud platforms, particularly AWS.
• Applying security principles within modern software development and cloud environments.
• Infrastructure as Code and automation tools such as Terraform, CDK or CloudFormation
• CI/CD pipelines and DevOps practices.
• Identifying, investigating and remediating security risks and vulnerabilities.
• Working closely with engineering teams to embed security into the development lifecycle.
• Python coding.

Responsabilidades

• Design, implement and improve DevSecOps controls throughout the Software Delivery Lifecycle.
• Integrate security tooling into CI/CD pipelines.
• Secure and govern multi-cloud environments across AWS and GCP.
• Develop cloud security baselines, guardrails, and best practices.
• Implement and maintain CSPM/CNAPP controls.
• Ensure cloud deployments comply with security standards and policies.
• Support threat modelling and security architecture reviews for cloud-native solutions.
• Assist with security investigations and incident response activities.
• Support detection engineering initiatives.

Descrição da oferta de emprego

Dunelm's DevSecOps team is seeking a hands-on security-focused engineer to protect our cloud-based software delivery.

You will design and implement DevSecOps controls across the SDLC, automate security tooling in CI/CD, and govern multi-cloud environments (AWS/GCP). This role is hybrid with a Leicester office presence and involves threat modelling, incident response, and ongoing security improvements.