Details:
- Salary: £45,000 - 60,000 - Annum
- Job Type: Permanent
- Job Status: Full-Time
- Salary Per: Annum
- Location: Cambridge
- Date: 1 day ago
Description:
DevSecOps Engineer – Cambridge
£45,000 - £60,000 (depending on experience level)
3 days per week in Cambridge
No Sponsorship option
SC Clearance preferable
I’m working with an established technology business in Cambridge that’s looking to bring in a DevSecOps Engineer to join their growing DevOps team.
This is a hands-on, mid-level role for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security.
You’ll be working across embedded, desktop and web products, helping build security into the development and release process.
What you’ll be doing:
Build and improve CI/CD pipelines across GitLab CI / TeamCity
Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs
Investigate CVEs and work with development teams on remediation
Harden Linux systems and support security/compliance requirements
Maintain Linux and Windows build infrastructure
Work with Docker, infrastructure-as-code and automated tooling
Help improve software supply-chain security, secrets management and release processes
Review infrastructure, pipeline and application changes
Create clear technical documentation and runbooksWhat they’re looking for:
3+ years in DevOps, DevSecOps, Platform, Build/Release or similar
Strong hands-on Linux experience
Good CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar
Strong Python and Bash scripting
Working knowledge of Docker
Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management
Good understanding of security fundamentals including least privilege, secrets management and patching
Comfortable working with Git and troubleshooting unfamiliar systemsUseful but not essential:
NIST, DISA STIGs, CIS, FIPS, ISO 27001 or Cyber Essentials Plus
Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP
Terraform or Ansible
AWS / VMware / Proxmox
Windows build environments and PowerShell
Embedded Linux
C/C++, Rust, .NET or JavaScript/TypeScript build environments
Experience within defence, aerospace or another regulated environment