DevSecOps Engineer

🚀 **DevSecOps Engineer – Cambridge

£45,000 - £60,000 (depending on experience level)** 3 days per week in Cambridge No Sponsorship option SC Clearance preferable I’m working with an established technology business in Cambridge that’s looking to bring in a DevSecOps Engineer to join their growing DevOps team.

This is a hands-on, mid-level role for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security.

You’ll be working across embedded, desktop and web products, helping build security into the development and release process.

What you’ll be doing:

• Build and improve CI/CD pipelines across GitLab CI / TeamCity
• Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs
• Investigate CVEs and work with development teams on remediation
• Harden Linux systems and support security/compliance requirements
• Maintain Linux and Windows build infrastructure
• Work with Docker, infrastructure-as-code and automated tooling
• Help improve software supply-chain security, secrets management and release processes
• Review infrastructure, pipeline and application changes
• Create clear technical documentation and runbooks

What they’re looking for:

• 3+ years in DevOps, DevSecOps, Platform, Build/Release or similar
• Strong hands-on Linux experience
• Good CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar
• Strong Python and Bash scripting
• Working knowledge of Docker
• Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management
• Good understanding of security fundamentals including least privilege, secrets management and patching
• Comfortable working with Git and troubleshooting unfamiliar systems

Useful but not essential:

• NIST, DISA STIGs, CIS, FIPS, ISO 27001 or Cyber Essentials Plus
• Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP
• Terraform or Ansible
• AWS / VMware / Proxmox
• Windows build environments and PowerShell
• Embedded Linux
• C/C++, Rust, .NET or JavaScript/TypeScript build environments
• Experience within defence, aerospace or another regulated environment