Job Description
n
DevSecOps Engineer – Cambridge
n £45,000 - £60,000 (depending on experience level)
3 days per week in Cambridge
No Sponsorship option
SC Clearance preferable
n I'm working with an established technology business in Cambridge that's looking to bring in a
DevSecOps Engineer
to join their growing DevOps team.
n This is a
hands-on, mid-level role
for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security.
n You'll be working across embedded, desktop and web products, helping build security into the development and release process.
What you'll be doing:
n
n
Build and improve CI/CD pipelines across GitLab CI / TeamCity
n
Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs
n
Investigate CVEs and work with development teams on remediation
n
Harden Linux systems and support
security/compliance
requirements
n
Maintain Linux and Windows build infrastructure
n
Work with Docker, infrastructure-as-code and automated tooling
n
Help improve software supply-chain security, secrets management and release processes
n
Review infrastructure, pipeline and application changes
n




Create clear technical documentation and runbooks
n
What they're looking for:
n
n
n
3+ years in DevOps, DevSecOps, Platform, Build/Release or similar
n
Strong hands-on
Linux
experience
n
Good
CI/CD
experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar
n
Strong
Python and Bash
scripting
n
Working knowledge of
Docker
n
Understanding of security tooling such as SAST,
vulnerability/dependency
scanning and CVE management
n
Good understanding of security fundamentals including least privilege, secrets management and patching
n
Comfortable working with Git and troubleshooting unfamiliar systems
n
Practical but not essential:
n
n
n
NIST, DISA STIGs, CIS, FIPS, ISO ***** or Cyber Essentials Plus
n
Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP
n
Terraform or Ansible
n
AWS / VMware / Proxmox
n
Windows build environments and PowerShell
n
Embedded Linux
n
C/C++, Rust, .NET or
JavaScript/TypeScript
build environments
n
Experience within defence, aerospace or another regulated environment
n
n
#J-*****-Ljbffr

📌 Devsecops Engineer (Western Australia)
🏢 So Code
📍 Western Australia