Job Description

n

DevSecOps Engineer – Cambridge
n £45,000 - £60,000 (depending on experience level)
3 days per week in Cambridge
No Sponsorship option
SC Clearance preferable
n I’m working with an established technology business in Cambridge that’s looking to bring in a DevSecOps Engineer to join their growing DevOps team.
n This is a hands-on, mid-level role for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security.
n You’ll be working across embedded, desktop and web products, helping build security into the development and release process.
What you’ll be doing:

n

n
Build and improve CI/CD pipelines across GitLab CI / TeamCity
n
Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs
n
Investigate CVEs and work with development teams on remediation
n
Harden Linux systems and support security/compliance requirements
n
Maintain Linux and Windows build infrastructure
n
Work with Docker, infrastructure-as-code and automated tooling
n
Help improve software supply-chain security, secrets management and release processes
n
Review infrastructure, pipeline and application changes
n




Create clear technical documentation and runbooks
n

What they’re looking for: n
n

n
3+ years in DevOps, DevSecOps, Platform, Build/Release or similar
n
Solid hands-on Linux experience
n
Good CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar
n
Strong Python and Bash scripting
n
Working knowledge of Docker
n
Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management
n
Good understanding of security fundamentals including least privilege, secrets management and patching
n
Comfortable working with Git and troubleshooting unfamiliar systems
n

Helpful but not essential: n
n

n
NIST, DISA STIGs, CIS, FIPS, ISO 27001 or Cyber Essentials Plus
n
Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP
n
Terraform or Ansible
n
AWS / VMware / Proxmox
n
Windows build settings and PowerShell
n
Embedded Linux
n
C/C++, Rust, .NET or JavaScript/TypeScript build environments
n
Experience within defence, aerospace or another regulated environment
n

n
J-18808-Ljbffr

📌 Devsecops Engineer Western Australia
🏢 So Code
📍 Western Australia