Senior Software Engineer (DevSecOps)

BBC UK; Greater London; Hybrid; GBP 70,000 - 80,000; Full time

Benefits offered by this job

London weighting

Flexible working

Job summary

BBC Senior Software Engineer, DevSecOps role within Media Technology-DevOps spans vulnerability management, platform ownership, and automation to bolster security across cloud services. The hands-on position emphasizes secure integrations, data flows, and scalable patterns while exploring AI-assisted capabilities to improve security analysis and workflows.

The role offers hybrid working with one day per week in the office and a London weighting.

Qualifications

• Hands-on experience operating and improving vulnerability-management, application-security or other security platforms used by engineering teams.
• Strong understanding of the vulnerability-management lifecycle, including prioritisation, ownership, risk treatment, resolution and reporting.
• Strong software engineering experience building and operating production services, integrations or automation using at least one modern programming language.
• Experience designing secure integrations and data flows across cloud environments using APIs, Infrastructure as Code, webhooks or event-driven patterns, with attention to IAM, least-privilege, secrets, failure handling and monitoring.
• Strong technical judgement and communication skills, with experience working across engineering teams to shape designs, explain trade-offs and deliver practical outcomes.

Responsibilities

• Operate and evolve security posture and vulnerability-management platforms, including configuration, access, integrations, data quality, risk policies and reporting.
• Own the technical implementation of vulnerability-management workflows, from prioritisation and assignment through to risk treatment, resolution and reporting.
• Monitor platform health and effectiveness, investigate data and integration issues, and work with suppliers for product support or changes.
• Design, build and operate integrations and automation that connect security findings with the context needed to act.
• Work with engineering teams to improve ownership, prioritisation and risk-management outcomes, turning successful approaches into reusable patterns.
• Maintain strong engineering standards through automated testing, observability, documentation, technical review and operational support.
• Evaluate, prototype and integrate AI-assisted capabilities where they can improve security analysis, prioritisation, remediation support or operational workflows.

Skills

Vulnerability management

Security platforms

Software engineering

APIs & IaC

IAM & least privilege

Cross-team comms

Job description

Job Requisition ID: 51697

Job Closing Date: 01/09/2026

Cardiff, GBR, CF10 1FT | Glasgow, GBR, G511DA | London, GBR, W1A 1AA | Newcastle-upon-Tyne, GBR, NE991RN | Salford, GBR, M50 2QH

JOB DETAILS

JOB TITLE: Senior Software Engineer, DevSecOps

JOB BAND: D

CONTRACT TYPE: Permanent, Full-time

DEPARTMENT: Media Technology, Development Operations, DevSecOps

LOCATION: UK wide - London, Salford, Cardiff, Newcastle or Glasgow - Hybrid (1 day per week in the office)

PROPOSED SALARY RANGE: £70,000 - £80,000 depending on relevant skills, knowledge and experience. The expected salary range for this role reflects internal benchmarking and external market insights.

London Weighting: £5,441 on top of base salary for London office only

We're happy to discuss flexible working. If you'd like to, please indicate your preference in the application - though there's no obligation to do so now. Flexible working will be part of the discussion at offer stage.

PURPOSE OF THE ROLE

Join Media Technology's Dev Operations team as a Senior Software Engineer, DevSecOps. You'll operate and evolve the platforms and workflows that help engineering teams understand, own and reduce security risk across applications and cloud services. This is a hands‑on role spanning vulnerability management, platform ownership, software engineering, integrations and automation, with opportunities to apply emerging AI-assisted capabilities where they can improve security and engineering outcomes.

WHY JOIN THE TEAM

Dev Operations works across Media Technology to improve how engineering risk is understood and managed at scale. You'll help shape a growing security engineering capability, combining platform ownership with software engineering to make vulnerability management more effective and easier for teams to adopt. You'll have room to influence technical direction, build reusable patterns and explore practical uses of AI and automation in security operations.

YOUR KEY RESPONSIBILITIES AND IMPACT

• Operate and evolve security posture and vulnerability-management platforms, including configuration, access, integrations, data quality, risk policies and reporting.
• Own the technical implementation of vulnerability-management workflows, from prioritisation and assignment through to risk treatment, resolution and reporting.
• Monitor platform health and effectiveness, investigate data and integration issues, and work with suppliers where product support or changes are required.
• Design, build and operate integrations and automation that connect security findings with the technical and organisational context needed to make them actionable.
• Work with engineering teams and technical leaders to improve ownership, prioritisation and risk‑management outcomes, turning successful approaches into reusable patterns.
• Maintain strong engineering standards through automated testing, observability, documentation, technical review and operational support.
• Evaluate, prototype and integrate AI‑assisted capabilities where they can improve security analysis, prioritisation, remediation support or operational workflows.

YOUR SKILLS AND EXPERIENCE

ESSENTIAL CRITERIA

• Hands‑on experience operating and improving vulnerability-management, application-security or other security platforms used by engineering teams.
• A strong understanding of the vulnerability-management lifecycle, including prioritisation, ownership, risk treatment, resolution and reporting.
• Strong software engineering experience building and operating production services, integrations or automation using at least one modern programming language.
• Experience designing secure integrations and data flows across cloud environments using APIs, Infrastructure as Code, webhooks or event‑driven patterns, with attention to identity and access management, least‑privilege design, secrets, failure handling and operational monitoring.
• Strong technical judgement and communication skills, with experience working across engineering teams to shape designs, explain trade‑offs and deliver practical outcomes.

DESIRABLE

• Experience working in DevSecOps, application security, security engineering or platform engineering.
• Experience building or operating shared technical capabilities used by multiple engineering teams.
• Experience adapting technical platforms to support different teams, workflows and reporting needs.
• Experience integrating security, engineering or operational data from multiple systems.
• Experience applying automation, data or AI to improve engineering, security or operational workflows.

If you can bring some of these skills and experience, along with transferable strengths, we'd love to hear from you and encourage you to apply.

Before your start date, you may need to disclose any unspent convictions or police charges, in line with our Contracts of Employment policy. This allows us to discuss any support you may need and assess any risks. Failure to disclose may result in the withdrawal of your offer.

Disclaimer

This job description is a written statement of the essential characteristics of the job, with its principal accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.

Please note: If you were to be offered this role, the BBC will conduct Employment screening checks which include Reference checks; Eligibility to work checks; and if applicable to the role, Safeguarding and Adverse media/Social media checks. Any offer made is conditional on these checks being satisfactory.

For any general queries, please contact: [e-mail]

Redeployment

The BBC is committed to redeploying employees seeking suitable alternative employment within the BBC and they will be given priority consideration ahead of other applicants. Priority consideration means for those employees seeking redeployment their application will be considered alongside anyone else at risk of redundancy, prior to any individuals being considered who are not at risk.

Information at a Glance

This is your BBC

At the BBC you can create and innovate in an inclusive environment while contributing to some of the world's best loved content, and the BBC's mission to inform, educate and entertain.

Find out more about the BBC

Life at BBC

• Fair pay and flexible benefits including a competitive salary package, a flexible 35-hour working week, 25 days annual leave with the option to buy an extra 5 days, a defined pension scheme and discounted dental, health care and gym.
• Excellent career and professional development.
• Support in your working life, including flexible working which you can discuss with us at any point during the application, selection or offer.
• A values-based organisation where the way we do things is important as what we do.

Benefits may vary if you are joining on an FTC basis or on an orchestra conditions contract.

Candidate pack

You belong

We have a working environment where we value and respect every individual's unique contribution, so all our employees feel that they can belong, thrive and achieve their full potential.

We want to attract the broadest range of talented people to join us. The more diverse our workforce, the better able we are to respond to and reflect our audiences in all their diversity.

We welcome applications from individuals, regardless of age, gender, ethnicity, disability, sexual orientation, gender identity, socio-economic background, religion and/or belief.

Find out more about diversity, inclusion and belonging in our strategy below.

Diversity, inclusion & belonging strategy

Disability confident

We are a disability confident employer. If you need to discuss adjustments or access requirements for the interview process, or to carry out this role, please contact us via email and we'd be happy to discuss: [e-mail]