At a Glance
- Tasks: Design secure Azure architectures and embed security in DevOps pipelines.
- Company: Leading financial services organisation with a focus on cloud security.
- Benefits: Hybrid work model, competitive pay, and opportunities for professional growth.
- Other info: Collaborative environment with a focus on innovation and compliance.
- Why this job: Join a dynamic team to enhance cloud security and make a real impact.
- Qualifications: 5+ years in Cloud Security with strong Azure and DevOps experience.
The predicted salary is between 60000 - 80000 £ per year.
My client, a major Financial Services organisation in the UK, is looking for an experienced Azure DevSecOps Consultant to help strengthen and mature their cloud security posture. This role will focus on embedding "Secure by Design" principles across Azure environments by integrating security, automation, compliance, and validation directly into Azure DevOps pipelines.
You'll work closely with Cloud, Security, Governance, Risk & Compliance, Development, and Operations teams within a highly regulated enterprise environment.
What You'll Be Doing:
- Designing and implementing secure Azure cloud architectures aligned to approved security frameworks
- Embedding security controls directly into Azure DevOps CI/CD pipelines
- Developing automated pipelines with integrated security scanning, testing, and validation
- Driving adoption of Policy as Code and automated compliance approaches
- Implementing and validating cloud security controls across Azure environments
- Integrating SAST, DAST, SCA, secret scanning, and cloud security tooling into deployment pipelines
- Supporting continuous compliance monitoring and automated remediation strategies
- Acting as a SME for Azure Cloud Security and DevSecOps best practices
- Producing technical documentation, SOPs, and governance artefacts
- Translating technical security risks into business-level impact for stakeholders
Key Skills & Experience:
- 5+ years' hands-on experience in Cloud Security with a strong Microsoft Azure focus
- Deep experience with Azure DevOps — Pipelines, Repos, Boards, and Artifacts
- Strong CI/CD implementation experience with embedded security gates and controls
- Expertise in Policy as Code and Infrastructure as Code approaches
- Strong knowledge of Azure security tooling including:
- Defender for Cloud
- Azure Sentinel
- Azure Policy
- Azure Key Vault
- Strong understanding of Identity & Access Management including:
- Conditional Access
- Privileged Identity Management (PIM)
- Multi-Factor Authentication (MFA)
- Azure networking and security expertise including:
- VNets & Peering
- NSGs & ASGs
- Firewalls
- Private Connectivity
- Experience with AKS / Container Security
- Experience integrating security tooling such as Prisma, SAST, DAST & SCA solutions
- Knowledge of compliance frameworks including NIST, ISO 27001, SOC 2 & GDPR
- Scripting/automation experience with PowerShell, Python or Bash
Desirable Certifications:
- Azure Security Engineer Associate
- Azure DevOps Engineer Expert
- CCSP
Azure DevSecOps Engineer in London employer: Ninetech
Join a leading Financial Services organisation in London, where you will play a pivotal role in enhancing cloud security as an Azure DevSecOps Engineer. With a strong emphasis on collaboration and innovation, the company fosters a dynamic work culture that prioritises employee growth through continuous learning and development opportunities. Enjoy the benefits of a hybrid working model, competitive remuneration, and the chance to make a meaningful impact in a highly regulated environment.
StudySmarter Expert Advice🤫
We think this is how you could land Azure DevSecOps Engineer in London
✨Tip Number 1
Network like a pro! Reach out to your connections in the industry, especially those who work in Azure or DevSecOps. Attend meetups or webinars to get your name out there and show off your expertise.
✨Tip Number 2
Showcase your skills! Create a portfolio or GitHub repository with projects that highlight your experience in Azure security and DevOps practices. This gives potential employers a tangible look at what you can do.
✨Tip Number 3
Prepare for interviews by brushing up on common questions related to Azure DevSecOps. Be ready to discuss how you've implemented security controls and automated compliance in past roles.
✨Tip Number 4
Don't forget to apply through our website! We have loads of opportunities that match your skills, and applying directly can give you a better chance of landing that dream job.
We think you need these skills to ace Azure DevSecOps Engineer in London
Some tips for your application 🫡
Tailor Your CV:Make sure your CV speaks directly to the Azure DevSecOps role. Highlight your experience with Azure, DevOps, and security practices. We want to see how your skills align with what we're looking for!
Showcase Your Projects:Include specific examples of projects where you've implemented security in Azure environments. We love seeing real-world applications of your skills, so don’t hold back on the details!
Be Clear and Concise:When writing your application, keep it straightforward. Use bullet points for key achievements and avoid jargon unless it's relevant. We appreciate clarity and directness in communication!
Apply Through Our Website:We encourage you to apply through our website for a smoother process. It helps us keep track of your application and ensures you’re considered for the role. Plus, it’s super easy!
How to prepare for a job interview at Ninetech
✨Know Your Azure Inside Out
Make sure you brush up on your Azure knowledge, especially around security tools like Defender for Cloud and Azure Sentinel. Be ready to discuss how you've implemented security controls in past projects and how they align with compliance frameworks.
✨Showcase Your CI/CD Experience
Prepare to talk about your hands-on experience with Azure DevOps, particularly in creating pipelines with embedded security gates. Have specific examples ready that demonstrate your ability to integrate security into CI/CD processes.
✨Understand the Business Impact
Be prepared to translate technical security risks into business-level impacts. This role requires you to communicate effectively with stakeholders, so think of examples where you've successfully done this in the past.
✨Demonstrate Automation Skills
Highlight your scripting and automation experience, especially with PowerShell, Python, or Bash. Discuss how you've used these skills to drive compliance and security automation in previous roles.
