At a Glance
- Tasks: Enhance cloud security and governance while collaborating with engineering teams.
- Company: Established tech company focused on innovation and cloud-native technologies.
- Benefits: Competitive salary, hybrid work model, generous leave, and professional development support.
- Other info: Join a culture that values security as an enabler and offers career growth opportunities.
- Why this job: Shape cloud security strategy and work with cutting-edge technologies in a collaborative environment.
- Qualifications: Experience in AWS security, automation, and Agile software engineering.
The predicted salary is between 60000 - 70000 £ per year.
Location: Manchester (Hybrid – 2 days per week in office)
We're partnering with an established technology and data-driven software business that develops large-scale digital platforms used by global enterprise customers. With a strong focus on innovation, security, and cloud-native technologies, the organisation is investing heavily in its platform engineering and security capabilities as it continues to scale. As part of this growth, they are seeking a DevSecOps Engineer to play a key role in improving cloud security, platform governance, automation, and operational resilience across a modern AWS-centric environment. This position offers the opportunity to influence security strategy, drive best practice, and work closely with engineering teams to embed security into every stage of the development lifecycle. This is an ideal opportunity for someone who enjoys balancing security, automation, cloud infrastructure, and engineering enablement within a collaborative and fast-moving technology business.
The Role
As a DevSecOps Engineer, you will be responsible for enhancing the security, governance, and operational maturity of cloud platforms and SaaS environments. Working closely with engineering, operations, and leadership teams, you'll help ensure infrastructure remains secure, scalable, observable, and compliant while enabling development teams to deliver efficiently. You'll be responsible for identifying security risks, improving cloud posture, implementing security tooling, automating operational processes, and supporting governance initiatives across the wider technology estate.
Key Responsibilities
- Improve and maintain cloud security posture across AWS environments.
- Implement and manage security controls, governance frameworks, and platform standards.
- Monitor infrastructure, applications, and SaaS services to identify risks, vulnerabilities, and configuration issues.
- Enhance observability, monitoring, alerting, and operational resilience.
- Develop automation to improve security, compliance, and operational efficiency.
- Manage identity and access controls, ensuring least-privilege principles are followed.
- Support vulnerability management and remediation programmes.
- Collaborate with engineering teams to embed security best practices throughout the software development lifecycle.
- Contribute to compliance, audit, and governance initiatives, including ISO 27001 aligned activities.
- Support security assessments, customer due diligence requests, and internal assurance activities.
- Promote a positive security culture by helping teams understand and manage risk pragmatically.
- Participate in an out-of-hours support rota following onboarding and training.
Required Experience
- Strong experience securing and managing AWS environments.
- Proven background improving cloud security posture and governance.
- Experience implementing security controls within cloud-native environments.
- Understanding of security risk management and security best practices.
- Knowledge of information security frameworks and compliance standards such as ISO 27001.
- Experience with infrastructure as code and automation.
- Hands-on experience with security tooling including vulnerability scanners, SIEM platforms, SAST tools, and monitoring solutions.
- Ability to balance security requirements with business and engineering objectives.
- Experience working within Agile software engineering environments.
- Development or scripting experience using Python.
- Experience with Terraform and/or CloudFormation.
- Understanding of modern AI tooling and governance considerations.
- Experience modernising or migrating legacy cloud environments.
- Exposure to Azure and/or Google Cloud Platform.
- Experience with serverless technologies including Lambda, SNS, and SQS.
- Experience with configuration management tools such as Puppet.
- Broader platform engineering or Site Reliability Engineering (SRE) experience.
- Exposure to SaaS security governance and Microsoft 365 security controls.
What's on Offer
- Salary of £60,000 - £70,000
- Performance-related bonus
- Hybrid working model (2 days per week in Manchester office)
- 25 days annual leave plus bank holidays
- Option to buy and sell additional annual leave
- Pension scheme with employer contributions
- Life assurance
- Ongoing training and professional development budget
- One-to-one coaching and career development support
- Home working equipment provided
- Collaborative engineering culture with genuine opportunities to influence security strategy and platform direction
Why Apply?
This role offers the opportunity to join a growing technology business where security is viewed as an enabler rather than a blocker. You'll have the chance to shape cloud security strategy, influence engineering best practices, and work with modern technologies in an environment that values innovation, collaboration, and continuous improvement.
DevSecOps Engineer employer: Maxwell Bond
Join a forward-thinking technology and data-driven software business in Manchester, where innovation and security are at the forefront of our mission. As a DevSecOps Engineer, you'll thrive in a collaborative culture that prioritises employee growth through ongoing training and one-to-one coaching, while enjoying a hybrid working model and a competitive benefits package. This is an exciting opportunity to influence cloud security strategy and work with cutting-edge technologies in a supportive environment that values your contributions.
StudySmarter Expert Advice🤫
We think this is how you could land DevSecOps Engineer
✨Get Involved in the Cybersecurity Community
Diving into the cybersecurity community is key for landing that full-time gig. Join forums like Reddit's r/cybersecurity or attend local meetups to connect with industry veterans and other job seekers. Networking is everything in this field—don’t just be a passive lurker!
✨Show Off Your Skills with Capture the Flag Competitions
Participate in Capture the Flag (CTF) competitions; these are not just a fun way to boost your skills but also a chance to showcase your talent to potential employers. Many companies, including Maxwell Bond, love seeing candidates who actively engage in these challenges.
✨Tailor Your Online Presence
Make sure your LinkedIn and any professional profiles reflect your cybersecurity expertise. Share your projects, whether they’re personal or from a previous role, to catch the eye of hiring managers. This is how they’ll find your passion and commitment to the field!
✨Apply Directly Through Maxwell Bond
Don’t forget to head straight to our website and check out any openings for cybersecurity roles at Maxwell Bond. Applying directly can sometimes give you an edge, especially if you can mention that you've been following our work or engaging in the community.
We think you need these skills to ace DevSecOps Engineer
Some tips for your application 🫡
Show off your technical skills:In cybersecurity, it's crucial to highlight your technical prowess. Make sure your CV showcases specific skills like network security, penetration testing, or threat analysis. If you have relevant certifications (like CEH or CISSP), pop those on the front page to grab attention!
Tailor your portfolio for the role:Even for a full-time role, a portfolio can set you apart. If you've worked on any cybersecurity projects—be it CTF challenges, security assessments, or research papers—include these in your application. This demonstrates not just your skills, but also your hands-on experience!
Use real-world examples:When writing your cover letter, don’t just stick to your qualifications. Share real-world examples of how you’ve tackled security issues or vulnerabilities. This gives the hiring team at Maxwell Bond insight into your practical problem-solving abilities and makes your application memorable.
Demonstrate your passion for cybersecurity:Cybersecurity is an ever-evolving field, so show us that you’re always learning! Mention any recent courses, webinars, or industry events you’ve attended. This not only exhibits your enthusiasm but also signals to Maxwell Bond that you’re committed to staying ahead in the game.
How to prepare for a job interview at Maxwell Bond
✨Sharpen Your Technical Skills
For a role in cybersecurity, it’s essential to be up-to-date with the latest tools and techniques. Brush up on your knowledge of firewalls, intrusion detection systems, and vulnerability assessment tools. Be ready to discuss specific scenarios where you’ve applied these skills, as hands-on experience can really set us apart in interviews.
✨Prepare for Scenario-Based Questions
Expect the interviewers at Maxwell Bond to throw in some hypothetical situations to see how you’d handle them. Think about common security breaches or incidents and be prepared to explain how you would respond. This not only shows your problem-solving skills but also your understanding of real-world cybersecurity challenges.
✨Highlight Your Certifications
Certifications like CompTIA Security+, CISSP, or CEH can give you a significant edge in a full-time role in cybersecurity. Make sure to mention these during your interview and be prepared to discuss what you learned through those certifications and how they relate to the position at Maxwell Bond.
✨Show Your Passion for Cybersecurity
Since you’re going for a full-time gig, showing genuine enthusiasm for the field can make all the difference. Share any personal projects, blogs, or communities you’re part of that relate to cybersecurity. This not only showcases your passion but also your commitment to staying engaged in this ever-evolving field.
