At a Glance
- Tasks: Design and maintain CI/CD pipelines, deploy Azure applications, and enhance application security.
- Company: Established organisation focused on cloud engineering and application security.
- Benefits: Competitive salary, flexible working options, and opportunities for professional growth.
- Other info: Join a dynamic team with mentorship opportunities and a focus on innovation.
- Why this job: Take ownership of secure software practices and make a real impact in the tech world.
- Qualifications: 3-5 years in DevOps or application security, strong Azure experience, and web application security skills.
The predicted salary is between 63000 - 77000 £ per year.
We're working with an established organisation looking to appoint an experienced DevSecOps Engineer to strengthen its Azure deployment and application security capabilities. This is a hands-on position combining Azure DevOps, cloud infrastructure and application security. You'll take ownership of CI/CD pipelines, Infrastructure-as-Code and security testing, while helping development teams embed secure practices throughout the software delivery lifecycle.
The Role
- Designing and maintaining CI/CD pipelines within Azure DevOps
- Deploying Azure applications and infrastructure using Terraform
- Supporting Azure services including App Services, AKS, Azure SQL, Storage, Key Vault, VNets, Private Endpoints and Front Door/WAF
- Introducing deployment practices such as blue/green releases, automated rollback and infrastructure drift detection
- Integrating SAST, DAST, dependency and container scanning into development pipelines
- Conducting web application security testing using Burp Suite, OWASP ZAP or similar tools
- Identifying and managing vulnerabilities against OWASP Top 10 and CVSS principles
- Implementing secrets detection, credential rotation and secure Key Vault practices
- Strengthening software supply-chain security through SBOM generation, dependency scanning and artefact signing
- Supporting API security testing, threat modelling and third-party penetration tests
- Configuring Azure-native security tooling, including Defender for Cloud, Azure Policy, Sentinel and Azure Monitor
- Enforcing identity and access controls across Entra ID, RBAC, Conditional Access and PIM
- Supporting compliance with frameworks such as Cyber Essentials Plus, ISO 27001 and GDPR
- Mentoring junior engineers and helping developers adopt secure coding and deployment practices
What We're Looking For
- Around three to five years' experience across DevOps, platform engineering or application security
- Strong hands-on experience with Microsoft Azure and Azure DevOps
- Proven experience securing web applications in a production environment
- Practical experience using Burp Suite for application security testing
- Experience with SonarQube or comparable SAST tooling
- Strong knowledge of OWASP Top 10, vulnerability management and remediation
- Experience building repeatable Azure deployments using Terraform
- Scripting ability with PowerShell, Python or Bash
- Experience implementing secrets detection and dependency/CVE remediation tooling
- The confidence to work independently, make risk-based decisions and support junior engineers
- Experience with Docker, Kubernetes/AKS, API security testing, threat modelling, SIEM tooling or software supply-chain security would be particularly useful.
Relevant certifications such as AZ-500, AZ-400, Security+, CySA+, CEH or OSCP would also be beneficial, although practical experience is more important. This is an excellent opportunity for someone who enjoys working across cloud engineering and application security and wants genuine ownership over how secure software is built, tested and released.
Locations
DevSecOps Engineer in Guildford, Surrey employer: Oscar
Join a dynamic and innovative software and Business Intelligence organisation in Hertford, where you'll thrive in a hybrid work environment that promotes flexibility and collaboration. As a Data Consultant, you'll enjoy a varied role with opportunities for professional growth, including managing projects from inception to deployment and engaging with a European customer base. The company fosters a supportive culture that values continuous learning and offers exposure to exciting industry events, making it an excellent employer for those seeking meaningful and rewarding work.
