Hybrid DevSecOps Engineer: Cloud Security & Automation

Addition; England; Hybrid; GBP 70,000 - 100,000; Full time

Benefits offered by this job

Pension contributions

26 days holiday + wellbeing days and b

Private medical cover

Life assurance

Enhanced family leave policies

Wellness allowance £500

Nutritionists and discounted health

Financial coaching

Job summary

Addition is undergoing a major cloud and technology transformation in the UK, delivering secure cloud environments, pipelines and applications. This role sits at the heart of secure engineering, enabling rapid innovation while maintaining strong governance and controls.

You will own vulnerability management, integrate security tooling into CI/CD (GitHub Actions), and collaborate with engineering teams to promote secure-by-design principles across AWS/Azure and containerized workloads.

Qualifications

• Extensive experience in DevSecOps/security engineering.
• Strong automation and scripting capabilities with a development-focused mindset.
• Hands-on Terraform across AWS/Azure.
• Solid understanding of cloud security, IAM, network and container security.
• Experience embedding security tooling into CI/CD pipelines (GitHub Actions).
• Knowledge of vulnerability management and remediation workflows.
• Able to design secure architectures and threat modelling.
• Excellent cross-functional communication skills.

Responsibilities

• Identify, prioritise and resolve security vulnerabilities across cloud platforms, applications, containers and CI/CD environments.
• Collaborate with Cyber Defence, SOC and Security teams to respond to threats and incidents.
• Embed security tooling into development pipelines and perform governance checks.
• Strengthen infrastructure security using Terraform and IaC best practices for AWS/Azure.
• Automate remediation, compliance checks and policy enforcement.
• Support secure solution design and threat modelling activities.

Skills

DevSecOps

Automation & scripting

Terraform

Cloud security

CI/CD security

GitHub Actions

Vulnerability management

Threat modelling

Security policies

Communication

Tools

Terraform

GitHub Actions

AWS

Azure

Job description

Addition is undergoing a major cloud and technology transformation in the UK, delivering secure cloud environments, pipelines and applications. This role sits at the heart of secure engineering, enabling rapid innovation while maintaining strong governance and controls.

You will own vulnerability management, integrate security tooling into CI/CD (GitHub Actions), and collaborate with engineering teams to promote secure-by-design principles across AWS/Azure and containerized workloads.