Security Engineer, AWS, DevSecOps

Sanderson; Greater London; Sur place; GBP 70 000 - 95 000; Plein temps

Résumé du poste

Sanderson is seeking a Security Engineer to deliver and maintain security controls across multiple technology workstreams as part of a major transformation programme in the United Kingdom. You will work closely with senior security specialists to secure cloud platforms, improve DevSecOps processes, manage vulnerabilities, and embed security throughout delivery.

In this role you will review infrastructure, code and configuration changes for security risks, support threat modelling and security

Qualifications

• Experience in security engineering within DevSecOps or platform engineering.
• Background with AWS, IAM, Kubernetes and container security.
• Experience with Terraform and Infrastructure-as-Code.
• Experience with CI/CD security tooling (SAST, SCA, container and IaC scanning).
• Scripting in Python or Bash.
• Experience with vulnerability management and risk assessment in regulated environments.

Responsabilités

• Implement and optimise CI/CD security tooling.
• Manage vulnerabilities and support remediation activities.
• Review infrastructure, code and configuration changes for security risks.
• Support threat modelling and security assurance activities.
• Maintain secrets management, certificates and access controls.
• Develop reusable security controls and best practices.
• Produce security documentation and evidence.

Connaissances

Security Engineering

DevSecOps

Vulnerability Management

Regulated environment experience

Threat modelling

Python/Bash scripting

Outils

AWS

Kubernetes

Terraform

CI/CD tooling (SAST/SCA)

Container security

IaC scanning

Description du poste

We're supporting a major transformation programme and are looking for a Security Engineer to help deliver and maintain security controls across multiple technology workstreams.

Working closely with senior security specialists, you'll play a key role in securing cloud platforms, improving DevSecOps processes, managing vulnerabilities, and ensuring security is embedded throughout delivery.

Key Responsibilities:

• Implement and optimise CI/CD security tooling.
• Manage vulnerabilities and support remediation activities.
• Review infrastructure, code and configuration changes for security risks.
• Support threat modelling and security assurance activities.
• Maintain secrets management, certificates and access controls.
• Develop reusable security controls and best practices.
• Produce security documentation and evidence where required.

Key Skills:

• Security Engineering, DevSecOps or Platform Engineering background.
• AWS, IAM, Kubernetes and container security experience.
• Terraform and Infrastructure-as-Code.
• CI/CD security tooling (SAST, SCA, container and IaC scanning).
• Python and/or Bash scripting.
• Vulnerability Management, CVSS and risk assessment experience.
• Previous experience within a regulated environment.