Senior DevSecOps Engineer | Global Enterprise

About the role

Our client, a global enterprise is seeking a Senior DevSecOps Engineer to join their technology team. In this strategic role, you will be responsible for integrating security practices into the development and operations pipelines, ensuring that the global systems maintain the highest standards of security, reliability, and performance. You will be a key contributor to the product initiatives, working at the intersection of development, security, and operations to build a secure-by-design culture across the organisation.

Key responsibilities

• Design, implement, and maintain secure CI/CD pipelines that integrate security scanning, vulnerability assessments, and compliance checks across all deployment stages

• Develop and enforce security policies, standards, and best practices for infrastructure, containerisation, and application deployment across global teams

• Collaborate with software development teams to embed security practices into the development lifecycle, including code reviews, threat modelling, and security testing

• Manage and automate infrastructure security, including identity and access management, secrets management, network security, and compliance monitoring

• Conduct security assessments, penetration testing, and vulnerability management across cloud and on-premises environments

• Lead incident response efforts for security-related events, conducting post-incident analysis and implementing preventative measures

• Monitor and optimise security tooling, including SAST, DAST, container scanning, and security information and event management (SIEM) solutions

• Provide mentorship and technical guidance to junior engineers and collaborate with cross-functional teams including development, operations, and compliance

• Stay current with emerging security threats, vulnerabilities, and industry best practices, ensuring the organisation remains ahead of potential risks

What we're looking for

• 7+ years of professional experience in DevOps, Site Reliability Engineering, Cloud, Infrastructure, or Application roles, with at least 3 years focused on DevSecOps position

• Advanced proficiency with containerisation and orchestration technologies, particularly Docker and Kubernetes

• Strong experience with CI/CD platforms such as Jenkins, GitLab CI, GitHub Actions, or equivalent solutions

• Demonstrated expertise in cloud platforms, including AWS, Azure, or Google Cloud Platform, with focus on security configurations and compliance

• Experience with Infrastructure as Code (IaC) tools such as Terraform, Ansible, or CloudFormation, with security best practices applied

• Proficiency in scripting and automation using languages such as Python, Bash, or Go

• Familiarity with security tools including static application security testing (SAST), dynamic application security testing (DAST), container scanning, and secrets management solutions

• Relevant certifications such as CISSP, Certified Kubernetes Security Specialist (CKS), or equivalent are highly desirable.