Job Description

DevSecOps Engineer – Cambridge
n £45,000 - £60,000 (depending on experience level)
n 3 days per week in Cambridge
n No Sponsorship option
n SC Clearance preferable
n I'm working with an established technology business in Cambridge that's looking to bring in a DevSecOps Engineer to join their growing DevOps team.
n This is a hands-on, mid-level role for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security.
n You'll be working across embedded, desktop and web products, helping build security into the development and release process.
n What you'll be doing:

n

n
- Build and improve CI/CD pipelines across GitLab CI / TeamCity
n
- Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs
n
- Investigate CVEs and work with development teams on remediation
n
- Harden Linux systems and support security/compliance requirements
n
- Maintain Linux and Windows build infrastructure
n
- Work with Docker, infrastructure-as-code and automated tooling
n
- Help improve software supply-chain security, secrets management and release processes
n
- Review infrastructure, pipeline and application changes
n




- Create clear technical documentation and runbooks
n

n

What they're looking for:

n

n
- 3+ years in DevOps, DevSecOps, Platform, Build/Release or similar
n
- Strong hands-on Linux experience
n
- Valuable CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar
n
- Robust Python and Bash scripting
n
- Working knowledge of Docker
n
- Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management
n
- Good understanding of security fundamentals including least privilege, secrets management and patching
n
- Comfortable working with Git and troubleshooting unfamiliar systems
n

n

Useful but not essential:

n

n
- NIST, DISA STIGs, CIS, FIPS, ISO 27001 or Cyber Essentials Plus
n
- Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP
n
- Terraform or Ansible
n
- AWS / VMware / Proxmox
n
- Windows build environments and PowerShell
n
- Embedded Linux
n
- C/C++, Rust, .NET or JavaScript/TypeScript build environments
n
- Experience within defence, aerospace or another regulated environment
n

📌 DevSecOps Engineer (Seven Mile Beach)
🏢 So Code
📍 Seven Mile Beach