Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Lead application and cloud security in a modern Azure-first environment.
- Company: Join a forward-thinking tech company focused on product security.
- Benefits: Competitive salary, hybrid working, and professional development opportunities.
- Why this job: Make a real impact by embedding security into innovative products.
- Qualifications: Experience in DevSecOps, Azure, and strong security principles.
- Other info: Dynamic role with opportunities for growth and collaboration.
The predicted salary is between 60000 - 65000 £ per year.
We are looking for a hands-on DevSecOps Engineer to take ownership of application and cloud security across a modern, Azure-first product environment. This is a product-focused security role, sitting at the intersection of development, DevOps and security, helping teams understand why vulnerabilities exist and how to fix them properly. The foundations are already strong, with regular external penetration testing, positive audit outcomes, and mature security tooling in place. Your role is to raise the bar further, embedding security deeper into how products are built, configured and deployed.
You will be the subject matter owner for DevSecOps, working closely with developers, DevOps and product teams to improve security posture through insight, automation and education.
- Act as the DevSecOps lead, owning application and cloud security practices across the business.
- Analyse outputs from SAST and DAST tools (e.g. Snyk, BrightSec), understanding vulnerabilities at a low level and advising development teams on remediation.
- Work closely with DevOps to ensure secure configuration and deployment within Azure (including Azure Front Door, WAF, Defender for Cloud, Sentinel).
- Support and interpret results from ITHC (UK Government-standard) penetration tests, ensuring findings are understood and remediated across product and platform teams.
- Embed security controls and testing into CI/CD pipelines, improving automation and consistency.
- Help educate and uplift DevOps and engineering teams on secure practices where needed.
- Collaborate with external security partners, audits and penetration testing providers.
- Investigate and support resolution of security issues raised via customers or automated alerts.
- Provide security input into customer discussions alongside sales and consultancy teams.
About you:
- Comfortable operating as a solo SME, owning the subject, partnering with the business and third parties.
- Experienced with working in a software house and product-led environment.
- Strong background and understanding of Azure.
- Ability to share knowledge and educate the wider team on best practices.
- Ideally with a background who has tight security principles.
Glasgow based office, hybrid working with minimum 2x office days per week. Salary £60,000 - £65,000 + benefits. Permanent opportunity. Full UK right to work required as successful candidate will be taken through clearance checking.
DevSecOps Engineer in Glasgow employer: Big Red Recruitment Midlands Limited
Contact Detail:
Big Red Recruitment Midlands Limited Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land DevSecOps Engineer in Glasgow
✨Tip Number 1
Network like a pro! Get involved in local meetups or online forums related to DevSecOps. Connecting with industry folks can lead to job opportunities that aren’t even advertised yet.
✨Tip Number 2
Show off your skills! Create a portfolio showcasing your projects, especially those involving Azure and security practices. This gives potential employers a taste of what you can bring to the table.
✨Tip Number 3
Don’t just apply; engage! When you find a role you fancy, reach out to someone at the company via LinkedIn. A friendly message can make you stand out from the crowd.
✨Tip Number 4
Keep learning! Stay updated on the latest trends in DevSecOps and Azure. Share your insights on social media or blogs to position yourself as a knowledgeable candidate.
We think you need these skills to ace DevSecOps Engineer in Glasgow
Some tips for your application 🫡
Tailor Your CV: Make sure your CV speaks directly to the DevSecOps role. Highlight your experience with Azure, security practices, and any relevant tools like Snyk or BrightSec. We want to see how you can bring value to our team!
Craft a Compelling Cover Letter: Your cover letter is your chance to shine! Share your passion for security and how you've tackled vulnerabilities in the past. Let us know why you're excited about joining StudySmarter and how you can help us raise the bar.
Showcase Your Problem-Solving Skills: In your application, give examples of how you've approached security challenges. We love candidates who can think critically and provide solutions, so don’t hold back on sharing your success stories!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the role. Plus, it shows you’re keen on being part of the StudySmarter family!
How to prepare for a job interview at Big Red Recruitment Midlands Limited
✨Know Your Tools
Familiarise yourself with the SAST and DAST tools mentioned in the job description, like Snyk and BrightSec. Be ready to discuss how you've used these tools in past roles and how they can help identify and remediate vulnerabilities.
✨Understand Azure Security
Since this role is Azure-focused, brush up on Azure security features such as Azure Front Door, WAF, and Defender for Cloud. Prepare to explain how you would implement secure configurations and deployments within Azure environments.
✨Showcase Your Collaboration Skills
This position requires working closely with various teams. Think of examples where you've successfully collaborated with developers and DevOps teams to improve security practices. Highlight your ability to educate others on security principles.
✨Prepare for Scenario Questions
Expect scenario-based questions that assess your problem-solving skills in real-world situations. Practice articulating how you would handle security issues raised by customers or alerts, and how you would ensure findings from penetration tests are remediated effectively.
