Devsecops Engineer

Purpose of the Role :

• This role owns the end-to-end DevSecOps discipline within the Connected Cars Platform engineering organisation. The engineer designs, builds, and continuously improves the CI/CD/CT pipelines, security toolchains, and internal developer platforms that underpin software delivery for Software Defined Vehicle (SDV) programmes from embedded ECU firmware to cloud backend services. Security is baked into the delivery wiring harness, not bolted on at gate review.
• The primary accountability is threefold: keep the build-deploy-validate pipeline fast and provably secure; conduct systematic cybersecurity assessments of vehicle binaries, OTA packages, and cloud APIs; and author the Python-based internal tooling that automates repetitive security, compliance, and diagnostic workflows. The engineer works across embedded Linux, AAOS, and AWS stacks, and is the team's authority on SAST/DAST/SCA, binary hardening verification, and secure OTA chain-of-custody

Experience :

• Minimum 3 years of total software engineering experience, with at least 2 years in DevSecOps/ platform engineering,
• Demonstrated hands-on ownership of CI/CD pipelines (Jenkins, GitLab CI, GitHub Actions) in a product-grade embedded or automotive environment.
• Proven experience conducting binary security assessments and/or penetration testing on embedded firmware or automotive ECU targets.
• Experience in the SDV / connected vehicle domain is strongly preferred; automotive Tier-1 or OEM background is an advantage

Technical Expertise – DevSecOps & Pipeline Engineering :

• Strong expertise in CI/CD/CT toolchains: Jenkins (Declarative/Scripted), GitHub Actions, GitLab CI, ArgoCD.
• experience with SAST tools (Coverity, Semgrep, CodeQL), SCA (Black Duck, OWASP Dependency-Check), and DAST (OWASP ZAP, Burp Suite).
• Proficiency in containerized build environments: Docker, Kubernetes/EKS, Helm; experience with Yocto SDK containers.
• Understanding of Infrastructure-as-Code: Terraform or AWS CDK for pipeline infrastructure.

Technical Expertise – Python & Internal Tooling :

• Production-grade Python development: type annotations, pytest, async I/O, packaging (pyproject.toml / Poetry), internal PyPI distribution.
• Experience building REST APIs (FastAPI / Flask) and CLI tools (Click / Typer) for internal developer productivity.
• Familiarity with NVD / OSV vulnerability feeds, CVE correlation, and SBOM-driven dependency risk tooling.
• Scripting experience in Bash and familiarity with Groovy (Jenkins DSL); ability to read and debug Makefile and CMake build systems.