Hybrid DevSecOps Engineer: Secure Cloud Pipelines & IaC

Bluetree Group; Rotherham; Hybrid; GBP 60,000 - 90,000; Full time

Benefits offered by this job

Health plan

Parental leave

Annual leave

Team events

Pension

Discounts

Cycle to Work

Free parking

Fruit & beverages

Onsite canteen

Job summary

Bluetree Group in the UK is looking for a DevSecOps Engineer to secure cloud infrastructure and CI/CD pipelines across Route 1 Print and Instantprint. You will own remediation of vulnerabilities, implement automated security controls, and collaborate with website, internal systems and IT teams.

The role covers AWS security, CI/CD tooling, IaC security scanning, SAST/SCA tooling, container security, and AI-risk management. Hybrid working and impactful, modern security tooling await.

Qualifications

• Hands-on AWS security experience and ownership of CI/CD security gates.
• Experience with SAST/SCA, secrets scanning, and IaC security scanning.
• Ability to read and fix code in at least one modern language.
• Familiarity with Terraform/CloudFormation/Pulumi and container security.
• Understanding AI-assisted development risks and risk-based prioritisation.

Responsibilities

• Own remediation of security findings across cloud, apps, and infra.
• Introduce automated controls and monitoring to prevent reoccurrence.
• Manage security tooling for SAST, SCA, secrets scanning, and IaC security.
• Secure CI/CD pipelines and guard AI coding tools access.
• Harden AWS: IAM, S3, logging, and threat detection.
• Review infrastructure against CIS benchmarks and implement changes.
• Collaborate with IT to patch and configure internal systems.

Skills

AWS security

CI/CD pipelines

SAST

SCA

Secrets scanning

IaC security

Terraform

CloudFormation

Pulumi

Docker

GitHub Actions

Jenkins

Azure DevOps

CIS benchmarks

Vulnerability management

AI risk awareness

Tools

GitHub Actions

Jenkins

Azure DevOps

Terraform

CloudFormation

Pulumi

Docker

Job description

Bluetree Group in the UK is looking for a DevSecOps Engineer to secure cloud infrastructure and CI/CD pipelines across Route 1 Print and Instantprint. You will own remediation of vulnerabilities, implement automated security controls, and collaborate with website, internal systems and IT teams.

The role covers AWS security, CI/CD tooling, IaC security scanning, SAST/SCA tooling, container security, and AI-risk management. Hybrid working and impactful, modern security tooling await.