Security Software Engineer

JOB DETAILS

JOB BAND: C

CONTRACT TYPE: Permanent, Full-time

DEPARTMENT: DevSecOps

LOCATION: London, Salford, Glasgow or Newcastle - Hybrid

PROPOSED SALARY RANGE: up to £57,500 depending on relevant skills, knowledge and experience. The expected salary range for this role reflects internal benchmarking and external market insights.

We're happy to discuss flexible working. If you'd like to, please indicate your preference in the application – though there's no obligation to do so now. Flexible working will be part of the discussion at offer stage.

PURPOSE OF THE ROLE

Join BBC MediaTech DevOps team as a DevSecOps Engineer. You'll help build, operate and improve the software, platforms and automation that support secure software delivery across Media Technology. The role spans software engineering, cloud infrastructure, security tooling, CI/CD, vulnerability management and engineering automation. You'll work on practical engineering problems alongside experienced engineers and engineering teams. The role is intended to give you exposure to different parts of DevSecOps and security engineering rather than specialising in a single platform or security discipline.

WHY JOIN THE TEAM

You'll work on practical engineering problems alongside experienced engineers and engineering teams. You'll be expected to independently deliver well-scoped pieces of work, while working with senior engineers on larger or more complex technical changes. The role is intended to give you exposure to different parts of DevSecOps and security engineering rather than specialising in a single platform or security discipline.

Your Key Responsibilities And Impact

• Build integrations that connect security, engineering and organisational data to make findings easier for teams to understand and act on. Build, maintain and improve backend services, integrations, automation and internal engineering tools.
• Work with AWS infrastructure and Infrastructure as Code to deliver and operate secure cloud-based services. Help integrate security checks and controls into CI/CD workflows, including dependency scanning, code scanning, secrets detection and container or infrastructure security tooling.
• Apply secure engineering practices around identity and access management, secrets, logging, monitoring, data handling and least-privilege access. Help operate and improve security and vulnerability-management platforms used by engineering teams.
• Investigate technical issues across services, integrations, cloud infrastructure and security platforms, and implement appropriate fixes. Write automated tests, documentation and operational tooling to support reliable production services.
• Deliver well-defined engineering changes independently, from implementation through testing and deployment. Work with senior engineers on larger pieces of work, contributing to technical design, estimation and implementation.
• Work with engineering teams to understand security or operational problems and help implement practical solutions. Contribute reusable code, patterns, documentation and automation where these can help other teams.
• Use AI-assisted engineering tools where they provide useful support for coding, testing, investigation, automation or security analysis.

Essential YOUR SKILLS AND EXPERIENCE

• Software Engineering & Delivery - Experience building, maintaining and operating software services, integrations, automation, or engineering tooling, using at least one modern programming language.
• Cloud & Platform Engineering - Experience working with cloud infrastructure (preferably AWS), including Infrastructure as Code, automated software delivery, and CI/CD practices.
• Security & Operational Awareness - Understanding of secure engineering principles, including APIs, authentication, access control, secrets management, monitoring, and software security best practices.
• Problem Solving & Technical Ownership - Ability to investigate technical issues, understand unfamiliar systems, and deliver practical engineering solutions with minimal day-to-day supervision.
• Engineering Collaboration - Experience using source control and automated testing, with the ability to clearly communicate technical challenges, solutions, and implementation decisions within an engineering team, alongside a strong interest in DevSecOps and security engineering.

DESIRABLE

• Application & Cloud Security Tooling - Experience with vulnerability management, application security, cloud security, and related security tooling such as dependency scanning, static analysis, secrets detection, or container scanning.
• Modern Cloud Architectures - Experience working with serverless, container-based, event-driven, or microservice architectures.
• Integration Development - Experience building integrations using APIs, webhooks, and event-driven technologies.
• Operational Excellence - Experience with logging, monitoring, alerting, incident investigation, and other operational support practices.
• Platform & Engineering Enablement - Experience contributing to shared engineering platforms or tooling, including the use of AI-assisted development tools to improve engineering productivity.

If you can bring some of these skills and experience, along with transferable strengths, we’d love to hear from you and encourage you to apply.

Disclaimer

This job description is a written statement of the essential characteristics of the job, with its principal accountabilities, incorporating a note of the skills, knowledge and experience required for a satisfactory level of performance. This is not intended to be a complete, detailed account of all aspects of the duties involved.

Please note: If you were to be offered this role, the BBC will conduct Employment screening checks which include Reference checks; Eligibility to work checks; and if applicable to the role, Safeguarding and Adverse media/Social media checks. Any offer made is conditional on these checks being satisfactory.

Before your start date, you may need to disclose any unspent convictions or police charges, in line with our Recruitment policy. This allows us to discuss any support you may need and assess any risks. Failure to disclose may result in the withdrawal of your offer.

For any general queries, please contact: [email protected]

We are unable to accept applications via CV and only applications made online will be considered. Please click on the APPLY NOW button to proceed with your application.

Redeployment

The BBC is committed to redeploying employees seeking suitable alternative employment within the BBC and they will be given priority consideration ahead of other applicants. Priority consideration means for those employees seeking redeployment their application will be considered alongside anyone else at risk of redundancy, prior to any individuals being considered who are not at risk.