Senior DevSecOps Engineer — Hybrid Work

ENGINEERINGUK; Cardiff; Hybrid; GBP 70,000 - 80,000; Full time

Job summary

ENGINEERINGUK is seeking a Senior Software Engineer, DevSecOps to join the Dev Operations team. The role focuses on operating and evolving vulnerability-management platforms, improving security postures and automating workflows across cloud environments.

You will work with engineering teams to reduce security risk, implement secure integrations, and explore AI-assisted capabilities to enhance security analysis and operational workflows. Hybrid working and London weighting may apply.

Qualifications

• Hands-on experience operating and improving vulnerability-management, application-security or other security platforms used by engineering teams.
• Strong understanding of the vulnerability-management lifecycle, including prioritisation, ownership, risk treatment, resolution and reporting.
• Strong software engineering experience building and operating production services, integrations or automation using at least one modern programming language.
• Experience designing secure integrations and data flows across cloud environments using APIs, IaC, webhooks or event-driven patterns, with attention to IAM, least-privilege, secrets and monitoring.
• Strong technical judgement and communication skills, with experience working across engineering teams to shape designs, explain trade-offs and deliver practical outcomes.

Responsibilities

• Operate and evolve security posture and vulnerability-management platforms, including configuration, access, integrations, data quality, risk policies and reporting.
• Own the technical implementation of vulnerability-management workflows, from prioritisation and assignment through to risk treatment, resolution and reporting.
• Monitor platform health and effectiveness, investigate data and integration issues, and work with suppliers where product support or changes are required.
• Design, build and operate integrations and automation that connect security findings with the technical and organisational context needed to make them actionable.
• Work with engineering teams and technical leaders to improve ownership, prioritisation and risk-management outcomes, turning successful approaches into reusable patterns.
• Maintain strong engineering standards through automated testing, observability, documentation, technical review and operational support.
• Evaluate, prototype and integrate AI-assisted capabilities where they can improve security analysis, prioritisation, remediation support or operational workflows.

Skills

Vulnerability management

Security platforms

Software engineering

API / Cloud

Security storytelling

Job description

ENGINEERINGUK is seeking a Senior Software Engineer, DevSecOps to join the Dev Operations team. The role focuses on operating and evolving vulnerability-management platforms, improving security postures and automating workflows across cloud environments.

You will work with engineering teams to reduce security risk, implement secure integrations, and explore AI-assisted capabilities to enhance security analysis and operational workflows. Hybrid working and London weighting may apply.