Senior DevSecOps & Cloud Security Engineer (Hybrid)

Copello Global; Uxbridge; Hybrid; GBP 90,000 - 130,000; Full time

Job summary

Copello Global is seeking a Senior Software Cybersecurity Engineer for Uxbridge or Edinburgh (Hybrid). You will secure software and cloud platforms, protect intellectual property, and participate in secure-by-design initiatives.

The role involves threat modelling, cloud and Kubernetes security, and embedding SAST/DAST/SCA into CI/CD pipelines while guiding development teams on secure coding practices.

Qualifications

• 7+ years in Cybersecurity, Application Security or Security Engineering.
• Hands-on experience with AWS, Azure or GCP.
• Strong Kubernetes and Docker/container security knowledge.
• Experience integrating SAST, DAST, SCA into CI/CD pipelines.
• Knowledge of threat modelling, IAM, cryptography and application security.
• Experience with Go and/or C# development.

Responsibilities

• Conduct threat modelling, risk assessments and security architecture reviews.
• Assess security across cloud and Kubernetes/container environments.
• Embed SAST, DAST, SCA and secret scanning into CI/CD pipelines.
• Perform security code reviews and provide secure coding guidance.
• Define security requirements and support engineering teams with secure-by-design practices.
• Drive vulnerability management across Kubernetes and container images.
• Triage and validate vulnerabilities and develop PoCs where appropriate.
• Manage IAM and key management controls.
• Support product security incident response and root-cause analysis.
• Develop detection engineering capabilities and security runbooks.
• Monitor emerging threats and drive security improvements.

Skills

Cybersecurity

Application Security

DevSecOps

Kubernetes security

Go development

C# development

Cloud security

Threat modelling

IAM and cryptography

CI/CD integration

Tools

AWS

Azure

GCP

Docker

Kubernetes

Job description

Copello Global is seeking a Senior Software Cybersecurity Engineer for Uxbridge or Edinburgh (Hybrid). You will secure software and cloud platforms, protect intellectual property, and participate in secure-by-design initiatives.

The role involves threat modelling, cloud and Kubernetes security, and embedding SAST/DAST/SCA into CI/CD pipelines while guiding development teams on secure coding practices.