DevSecOps / Cloud Security Engineer

Summary: The DevSecOps role based in Leeds, UK, focuses on building and maintaining CI/CD pipelines while ensuring security practices are integrated throughout the development lifecycle. The position requires expertise in managing infrastructure as code and implementing security measures for cloud and container environments. Additionally, the role involves conducting penetration testing and promoting secure coding practices within the team.

Key Responsibilities:

• Build and maintain CI/CD pipelines incorporating SAST, DAST, and SCA tools.
• Define and enforce quality gates.
• Conduct penetration testing and threat modeling.
• Manage Infrastructure as Code (IaC) using Terraform, Ansible, or CloudFormation.
• Ensure cloud and container security, including secrets management.
• Implement monitoring, logging, and automated remediation.
• Promote secure coding practices across the team.

Key Skills:

• Experience with CI/CD pipelines and security tools (SAST, DAST, SCA).
• Knowledge of Infrastructure as Code (IaC) tools like Terraform, Ansible, or CloudFormation.
• Understanding of cloud and container security practices.
• Experience in penetration testing and threat modeling.
• Ability to implement monitoring and logging solutions.
• Strong communication skills to promote secure coding practices.

Salary (Rate): undetermined

City: Leeds

Country: United Kingdom

Working Arrangements: on-site

IR35 Status: undetermined

Seniority Level: undetermined

Industry: IT