DevOps Security Engineer

Job Description: DevOps Security Engineer (Position for End Client)

Overview

We are seeking a passionate and skilled DevOps Security Engineer to join our dynamic and inclusive team, for an end client. In this role, you will be at the forefront of integrating security practices into our DevOps workflows, ensuring our cloud infrastructure and applications are secure from development through deployment. We are committed to fostering a diverse, equitable, and inclusive environment where all voices are heard and valued. As a DevOps Security Engineer, you will collaborate across teams to design, implement, and maintain robust security solutions, focusing on cloud security, CI/CD pipeline protection, container security, infrastructure as code, and automated vulnerability management. If you are dedicated to continuous improvement in security and automation, and eager to contribute to a culture of respect and inclusion, we want to hear from you.

Responsibilities

• Design, implement, and maintain security controls and best practices across cloud environments.
• Secure CI/CD pipelines, integrating security checks to identify risks early in the development lifecycle.
• Manage Kubernetes and container security, including runtime protection and image scanning.
• Implement and maintain Infrastructure as Code (IaC) security using tools such as Terraform and Ansible.
• Develop and maintain security automation workflows using SAST, DAST, SCA, and vulnerability scanning tools.
• Collaborate with development, operations, and security teams to embed security into all phases of product development.
• Continuously monitor security posture and respond to security incidents in coordination with relevant teams.
• Stay current with emerging security threats, vulnerabilities, and technology trends, sharing knowledge with the team.
• Champion security awareness and provide guidance on security best practices across the organization.

Qualifications

• Proven experience in DevOps or security engineering roles, with a focus on cloud security practices.
• Strong expertise in securing CI/CD pipelines and automation of security testing.
• Hands-on experience with Kubernetes and container security tools and methodologies.
• Proficiency with Infrastructure as Code tools such as Terraform and Ansible.
• Familiarity with security scanning tools including SAST (Static Application Security Testing), DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), and vulnerability scanners.
• Solid understanding of cloud platforms (e.g., AWS, Azure, GCP) and their security features.
• Knowledge of scripting and programming languages (e.g., Python, Bash) for automation.
• Excellent collaboration and communication skills with a commitment to inclusive practices and respect for diverse perspectives.
• Relevant certifications such as CISSP, CISM, AWS Security Specialty, or equivalent are a plus.
• Demonstrated commitment to diversity, equity, and inclusion in the workplace.

We strongly encourage applicants of all backgrounds, identities, and abilities to apply.

We celebrate diversity and are committed to creating an inclusive environment for all employees.

Amoria Bond operates as an employment Business and agency. No terminology in this advert is intended to discriminate on the grounds of age or experience, and we confirm that we are happy to accept applications from persons of any age or experience for this role.