Senior DevSecOps Engineer - Platform Security & Automation

BBC Group and Public Services; Greater London; Hybrid; GBP 70,000 - 80,000; Full time

Benefits offered by this job

Flexible working

Hybrid working (1 day in office per w​

London weighting

Job summary

The BBC Group and Public Services is seeking a Senior Software Engineer, DevSecOps to operate and evolve vulnerability-management platforms across applications and cloud services. This hands-on role spans vulnerability management, platform ownership, software engineering, integrations and automation to reduce security risk and improve engineering outcomes.

The position is UK-wide with hybrid working (1 day per week in the office) in London, Salford, Cardiff, Newcastle or Glasgow, with a proposed

Qualifications

• Hands-on experience operating and improving vulnerability-management, application-security or other security platforms used by engineering teams.
• Strong understanding of vulnerability-management lifecycle: prioritisation, ownership, risk treatment, resolution and reporting.
• Strong software engineering experience building and operating production services, integrations or automation.
• Experience designing secure integrations and data flows across cloud environments using APIs, Infrastructure as Code, webhooks or event-driven patterns.
• Strong technical judgement and communication skills, with experience shaping designs and delivering practical outcomes.

Responsibilities

• Operate and evolve security posture and vulnerability-management platforms, including configuration, access, integrations, data quality, risk policies and reporting.
• Own the technical implementation of vulnerability-management workflows, from prioritisation and assignment through to risk treatment, resolution and reporting.
• Monitor platform health and investigate data and integration issues, and work with suppliers where product support or changes are required.
• Design, build and operate integrations and automation that connect security findings with the context needed to make them actionable.
• Collaborate with engineering teams to improve ownership, prioritisation and risk-management outcomes, turning approaches into reusable patterns.
• Maintain engineering standards through automated testing, observability, documentation and operational support.
• Evaluate, prototype and integrate AI-assisted capabilities to improve security analysis and workflows.

Skills

Vulnerability management

Security platforms

Software engineering

APIs & IaC

Cloud security

Automation & AI in security

Job description

The BBC Group and Public Services is seeking a Senior Software Engineer, DevSecOps to operate and evolve vulnerability-management platforms across applications and cloud services. This hands-on role spans vulnerability management, platform ownership, software engineering, integrations and automation to reduce security risk and improve engineering outcomes.

The position is UK-wide with hybrid working (1 day per week in the office) in London, Salford, Cardiff, Newcastle or Glasgow, with a proposed