DevSecOps Engineer

Job summary

The DevSecOps Engineer secures AWS cloud infrastructure, application environments, and development pipelines for e-commerce print platforms. The role involves personally triaging and remediating security findings, implementing automated CI/CD scanning and safeguards for AI-assisted code, and hardening AWS services, APIs, containers, and Infrastructure as Code. The engineer also prioritises fixes by risk and works with development and IT teams to prevent vulnerabilities from recurring.

Benefits

Qualifications

• DevOps, platform, or cloud engineering background with a focus on security.
• Typically four or more years of DevOps or cloud engineering experience, with significant security focus.
• Hands-on AWS security experience, including IAM, S3, CloudTrail, GuardDuty, Security Hub, and AWS Config.
• Experience owning CI/CD pipelines and adding security gates.
• Experience with SAST, SCA, secrets scanning, and Infrastructure as Code security tools.
• Ability to read and fix application code in a modern language such as C#, Java, or Go.
• Experience with Infrastructure as Code tools such as Terraform, CloudFormation, or Pulumi.
• Knowledge of containerisation and securing container images and workloads.
• Understanding of security risks introduced by AI-assisted development.
• AWS Certified Security – Specialty certification or experience with Cyber Essentials Plus, ISO 27001, or PCI DSS is beneficial.

Responsibilities

• Own, triage, prioritise, and remediate security findings across cloud, application, and internal environments.
• Resolve issues within severity-based timeframes and report open findings to leadership monthly.
• Add automated controls, tests, and monitoring to prevent recurring vulnerabilities.
• Implement and maintain CI/CD security scanning for code, dependencies, containers, and Infrastructure as Code.
• Set security guardrails for AI-generated code, dependencies, and coding-tool access.
• Harden pipelines with branch protection, least-privilege permissions, and short-lived deployment credentials.
• Secure AWS IAM, S3 access, logging, and threat detection.
• Review infrastructure against benchmarks such as CIS and implement required changes.
• Use automation and Infrastructure as Code to deliver repeatable security improvements.
• Assess and improve API and third-party integration security, including authentication and authorisation.
• Manage vulnerability scan findings and coordinate patching and configuration with IT.

Skills

Certifications

Languages

Industry

Relocation