DevSecOps Engineer

We're looking for a hands-on Dev Sec Ops  Engineer to take ownership of application and cloud security across a modern, Azure-first product environment. This is a product-focused security role, sitting at the intersection of development, Dev Ops and security, helping teams understand why vulnerabilities exist and how to fix them properly.

The foundations are already strong, with regular external penetration testing, positive audit outcomes, and mature security tooling are in place.

Your role is to raise the bar further, embedding security deeper into how products are built, configured and deployed.

You'll be the subject matter owner for Dev Sec Ops , working closely with developers, Dev Ops and product teams to improve security posture through insight, automation and education.

The role:

Act as the Dev Sec Ops  lead, owning application and cloud security practices across the business
Analyse outputs from SAST and DAST tools (e.g. Snyk, Bright Sec), understanding vulnerabilities at a low level and advising development teams on remediation
Work closely with Dev Ops to ensure secure configuration and deployment within Azure (including Azure Front Door, WAF, Defender for Cloud, Sentinel)
Support and interpret results from ITHC (UK Government-standard) penetration tests, ensuring findings are understood and remediated across product and platform teams
Embed security controls and testing into CI/CD pipelines, improving automation and consistency
Help educate and uplift Dev Ops and engineering teams on secure practices where needed
Collaborate with external security partners, audits and penetration testing providers
Investigate and support resolution of security issues raised via customers or automated alerts
Provide security input into customer discussions alongside sales and consultancy teams

About you:

Comfortable operating as a solo SME, owning the subject, partnering with the business and third parties
Experienced with working in a software house and product led environment
Strong background and understanding of Azure
Ability to share knowledge and educate the wider team on best practices
Ideally with a background who has tight security principles   
Nottingham based office, hybrid working with minimum 2x office days per week.
Salary £60,000 - £65,000 + benefits
Permanent opportunity

* Full UK right to work required as successful candidate will be taken through clearance checking