DevSecOps Engineer

THE NEXT CHAPTER STARTS WITH YOU
DevSecOps Engineer
Embed security, automation and resilience into the technology powering the next chapter of Vanquis
We've invested in modernising our technology landscape. The opportunity now is to strengthen how security is integrated across development and operations, helping teams deliver reliable change with confidence.
As a DevSecOps Engineer, you'll build secure Infrastructure as Code, contribute to CI/CD design, integrate security tooling and automated controls, and improve monitoring and incident response. You'll work across technical disciplines to protect software, data and customer outcomes while improving delivery performance and cost-effectiveness.

There's More to the Story
This role is part of a wider Technology & Change transformation, strengthening engineering foundations and building capabilities that can deliver value safely and sustainably.

How you'll make an impact

You'll...

So that...

Integrate security controls and tooling into CI/CD pipelines, automated testing and deployment processes

Vulnerabilities are identified earlier and software can move through delivery with stronger security assurance.

Develop secure, scalable Infrastructure as Code and automation using tools such as Terraform or CloudFormation

Infrastructure is provisioned consistently, efficiently and with security, reliability and cost in mind.

Implement monitoring, logging and alerting across development, test and production environments

Teams can identify issues quickly, respond proactively and reduce customer or operational impact.

Carry out vulnerability assessments and help define proportionate risk-mitigation actions

Security risks are understood, prioritised and addressed before they become incidents.

Support security incident response and troubleshoot complex infrastructure and deployment issues

Incidents are contained and resolved quickly, with clear learning fed back into engineering practices.

Collaborate with Product, Engineering, Technology & Change peers and third-party partners

Security becomes a shared responsibility and continuous improvement is embedded across delivery.

Why this role matters
Security must be built into modern software delivery. This role helps teams find vulnerabilities earlier, automate repeatable controls, improve service reliability and respond quickly when incidents occur. The result is safer change, stronger protection for critical assets and clearer compliance evidence.
Our DevSecOps approach

We believe in

What that means

Secure by design

Security controls are built into delivery rather than added at the end.

Automation first

Repeatable work is automated to improve speed, consistency and control.

Everything as code

Infrastructure and configuration are versioned, reviewable and reproducible.

Observable services

Monitoring, logging and alerting support early detection and faster recovery.

Shared ownership

Engineering, product, operations and security work together to manage risk.

Technology stack

Platforms & engineering

Security & operations

Terraform and CloudFormation

Security scanning and vulnerability assessment

Python and automation scripting

Access control, authentication and encryption

Jenkins, Travis CI, CircleCI and Git

Monitoring, logging and alerting

AWS, Azure and GCP

Incident response and risk mitigation

Docker and container technologies

Secure configuration and continuity planning

Essential experience

Hands-on experience with Infrastructure as Code, ideally Terraform or CloudFormation, and automation scripting in a language such as Python.
Practical knowledge of CI/CD tooling, Git-based version control and secure software delivery practices.
Experience with cloud platforms such as AWS, Azure or GCP and container technologies such as Docker.
Experience with security scanning, vulnerability assessment, monitoring, logging and incident response.
Strong understanding of security principles, including encryption, access controls, authentication and infrastructure security.
Strong analytical and problem-solving skills, with the ability to diagnose complex infrastructure, deployment and security issues.
Confident collaboration across engineering, product, operations, security and third-party teams.

Useful, but not essential

Experience with orchestration technologies and modern cloud-native delivery patterns.
Knowledge of SRE principles, service reliability, capacity management and continuity planning.
Experience working in financial services or another regulated technology environment.
Relevant cloud, security, DevOps or infrastructure certification.
Degree, equivalent professional qualification or substantial relevant work experience.

Career development
You will have opportunities to deepen your expertise across cloud security, automation, Infrastructure as Code and SRE practices, contribute to tooling decisions, lead improvement activity and provide guidance to junior DevSecOps engineers.

Why Vanquis?

Benefits & culture

Learning & wellbeing

Award-winning employer

LinkedIn Learning

Flexible working

Two volunteering days

Inclusive culture

Enhanced family leave

Up to 10% pension contribution

Paid birthday leave

25-30 days annual leave

Career development opportunities

Ready to shape what's next?
If you're looking for an opportunity to combine cloud engineering, automation and security while helping shape modern technology delivery at Vanquis, we'd love to hear from you.

Recruitment agency information
Our Talent Acquisition team manages all recruitment activity directly. We work with approved recruitment partners where additional support is required.
Unsolicited CVs submitted without prior agreement from Vanquis Talent Acquisition will be considered direct applications and no agency fees will be payable.

The Next Chapter Starts with You.