DevSecOps Engineer

DevSecOps Engineer – Cambridge

£45,000 - £60,000 (depending on experience level)

3 days per week in Cambridge

No Sponsorship option

SC Clearance preferable

I’m working with an established technology business in Cambridge that’s looking to bring in a DevSecOps Engineer to join their growing DevOps team.

This is a hands-on, mid-level role for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security.

You’ll be working across embedded, desktop and web products, helping build security into the development and release process.

What you’ll be doing:

Build and improve CI/CD pipelines across GitLab CI / TeamCity

Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs

Investigate CVEs and work with development teams on remediation

Harden Linux systems and support security/compliance requirements

Maintain Linux and Windows build infrastructure

Work with Docker, infrastructure-as-code and automated tooling

Help improve software supply-chain security, secrets management and release processes

Review infrastructure, pipeline and application changes

Create clear technical documentation and runbooksWhat they’re looking for:

3+ years in DevOps, DevSecOps, Platform, Build/Release or similar

Strong hands-on Linux experience

Good CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar

Strong Python and Bash scripting

Working knowledge of Docker

Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management

Good understanding of security fundamentals including least privilege, secrets management and patching

Comfortable working with Git and troubleshooting unfamiliar systemsUseful but not essential:

NIST, DISA STIGs, CIS, FIPS, ISO 27001 or Cyber Essentials Plus

Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP

Terraform or Ansible

AWS / VMware / Proxmox

Windows build environments and PowerShell

Embedded Linux

C/C++, Rust, .NET or JavaScript/TypeScript build environments

Experience within defence, aerospace or another regulated environment