Engineer DevSecOps

TN United Kingdom; Bedford; On-site; GBP 50,000 - 90,000; Full time

Job summary

Join a forward-thinking global organization as an Application and Product Security Engineer (DevSecOps). In this dynamic role, you will design, build, and maintain a robust DevSecOps infrastructure while collaborating with development teams to ensure secure practices are followed. Your expertise in GitLab and various development environments will be crucial as you drive alignment within teams and support enterprise product strategies. This position offers an exciting opportunity to influence security measures and cultivate a culture of awareness within a thriving organization focused on innovation and excellence.

Qualifications

• 5+ years in software or embedded firmware development and deployment.
• Strong understanding of development tools and security protocols.
• Experience with multi-factor authentication and SSO.

Responsibilities

• Act as DevSecOps design authority throughout project lifecycles.
• Support secure development best practices across product teams.
• Collaborate with global resources and drive alignment.

Skills

DevSecOps

GitLab

Software Development

Embedded Firmware Development

Multi-Factor Authentication

Communication Skills

Security Protocols

Education

Bachelor’s Degree in IT

Bachelor’s Degree in Computer Science

Tools

Docker

Kubernetes

Git

SVN

CVS

Job description

Social network you want to login/join with:

Vertiv, a global organization with nearly 20,000 employees, designs, builds, and services critical infrastructure that enables vital applications for data centers, communication networks, and commercial and industrial facilities. We support today’s growing mobile and cloud computing markets with a portfolio of power, thermal, and infrastructure management solutions.

The Application and Product Security Engineer (DevSecOps) is responsible for designing, building, testing, implementing, and maintaining a DevSecOps infrastructure within a dynamic global organization. The engineer should have a thorough understanding of various development environments and toolchains, primarily centered around GitLab, and experience ranging from basic DSP code development to complex cloud service deployments. Staying current with the latest tools and methods is essential.

The ideal candidate will have extensive hands-on experience in building and migrating development environments. This role acts as a technical contact and liaison between the Product Security team and development teams, ensuring adherence to the global DevSecOps architecture, supporting secure development practices, and communicating DevSecOps maturity to leadership. The position also involves triaging impacts of CVEs and vulnerabilities, requiring the ability to investigate application and component software implementations for potential impacts.

What you will be doing?

1. Act as DevSecOps design authority throughout project lifecycles.
2. Support secure development best practices across product and service teams.
3. Drive alignment and governance within development teams.
4. Support enterprise product strategy and DevSecOps roadmaps.
5. Review system performance, security measures, and recommend improvements.
6. Identify critical deficiencies in the portfolio and propose solutions.
7. Collaborate with global onshore and offshore resources.
8. Serve as escalation point for security issues.
9. Cultivate security awareness and ongoing education.
10. Support QA, certification, and security testing processes.

What Would Be the Perfect Qualifications?

• Bachelor’s Degree in IT, Computer Science, or related field (highly desirable).
• At least 5 years’ experience in software or embedded firmware development and deployment.
• Meaningful experience with GitLab.
• Contributed to source code in a development team.
• Strong understanding of development tools, processes, and security protocols.
• Experience with multi-factor authentication, SSO, and identity management.
• Excellent communication skills and business acumen.
• Ability to influence and build relationships within a dynamic environment.

What kind of work will you be doing?

• Experience with SCM solutions like Git, SVN, CVS.
• Deployment and usage of Docker and Kubernetes.
• Certifications related to development processes are preferred.
• Creating technical reports and proof of concept code.
• Development experience in embedded systems and web applications.
• Researching new tools and methodologies for DevSecOps.
• Linux kernel build and configuration experience.
• Knowledge of Layer 2, Layer 3 networking, QoS.
• Operating system configuration for Windows, Linux, Android, iOS.
• Experience with device boot processes and programming languages including Assembly, C, C++, Java, .NET, Python, and Go.