At a Glance
- Tasks: Join agile teams to embed security in software delivery and conduct hands-on threat modelling.
- Company: Sanderson G&D is a fast-growing Cyber Security consultancy focused on secure digital services for the UK Government.
- Benefits: Enjoy remote work options, significant autonomy, and long-term career progression in a supportive environment.
- Other info: Must hold active SC clearance; this role offers a unique opportunity to lead security best practices.
- Why this job: Make a real-world impact by shaping the security of vital digital services while influencing team culture.
- Qualifications: Hands-on experience in application and cloud security, with proficiency in Python and familiarity with CI/CD environments.
The predicted salary is between 48000 - 84000 € per year.
Overview
Sanderson are currently working with a client who are looking to grow their Software Development team, particularly within the DevOps / DevSecOps space.
Your Role
In this role, you will exploit the best of cloud and DevSecOps technologies to drive increase speed in deployment automation whilst applying and implementing SRE principles. You will oversee code releases, deployments and support operational systems.
Furthermore, this role will require understanding in some of the following fields:
- Cloud technologies, for example, AWS, Azure and GCP
- Cyber security including vulnerability management, IDAM and network security
- Virtualisation and Containerisation using tools such as Docker and Kubernetes
- Architectural styles such as Microservices and APIs
- DevSecOps tooling using version control tools like Git, CI/CD, Infrastructure as Code and shell scripting.
This role will require eligibility to be clearable to DV Clearance
Qualifications / Requirements
- Experience with cloud technologies (AWS, Azure, GCP) and deployment automation
- Security-focused mindset with knowledge of vulnerability management, identity and access management, and network security
- Experience with virtualization and containerization (Docker, Kubernetes)
- Experience with microservices architectures and API design
- Proficiency with DevSecOps tooling, version control (Git), CI/CD, Infrastructure as Code, and shell scripting
- Eligibility to obtain DV clearance
How to Apply
If you're interested in the above, apply or reach out to Steven Mitchell at sandersonplc.com (no email hyperlink provided here).
Reasonable Adjustments
Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients.
If you need any help or adjustments during the recruitment process for any reason, please let us know when you apply or talk to the recruiters directly so we can support you.
#J-18808-LjbffrDevsecops Engineer in England employer: Sanderson Government & Defence
At Sanderson G&D, we pride ourselves on being a leading Cyber Security consultancy that values innovation and collaboration. Our work culture fosters autonomy and encourages professional growth, allowing you to make a significant impact on the security of vital digital services for the UK Government. With opportunities for remote working and a supportive environment, we are committed to your development as a DevSecOps Engineer, ensuring you thrive in a fast-paced, agile setting.
Contact Detail:
Sanderson Government & Defence Recruiting Team
StudySmarter Expert Advice🤫
We think this is how you could land Devsecops Engineer in England
✨Tip Number 1
Familiarise yourself with the specific tools mentioned in the job description, such as Burp Suite, ZAP, and Nessus. Having hands-on experience or even a solid understanding of these tools will help you stand out during discussions with the hiring team.
✨Tip Number 2
Brush up on your knowledge of cloud-native platforms like AWS and Azure. Being able to discuss your experience or understanding of these environments will demonstrate your readiness to work in a modern DevSecOps role.
✨Tip Number 3
Prepare to showcase your ability to engage with engineering teams effectively. Think of examples where you've successfully communicated security principles in a developer-friendly manner, as this is crucial for the role.
✨Tip Number 4
Since the role requires active SC clearance, ensure that you are aware of the requirements and processes involved in obtaining or maintaining this clearance. Being proactive about this can show your commitment to the position.
We think you need these skills to ace Devsecops Engineer in England
Some tips for your application 🫡
Tailor Your CV:Make sure your CV highlights relevant experience in application security and DevSecOps. Focus on your hands-on expertise with CI/CD environments, cloud security, and any specific tools mentioned in the job description, like Burp Suite or Splunk.
Craft a Compelling Cover Letter:In your cover letter, express your passion for embedding security into the software development lifecycle. Mention specific projects where you've successfully integrated security practices and how you can contribute to the company's mission of delivering secure digital services.
Showcase Technical Skills:Clearly outline your technical skills related to the role, such as proficiency in Python, experience with threat modelling, and familiarity with security testing tools. Use concrete examples to demonstrate your capabilities and how they align with the job requirements.
Highlight Collaboration Experience:Since the role involves working closely with engineering teams, emphasise your experience in collaborative environments. Share examples of how you've engaged with developers to promote secure design principles and improve security practices within agile teams.
How to prepare for a job interview at Sanderson Government & Defence
✨Showcase Your Technical Skills
Be prepared to discuss your hands-on experience with application and cloud security, especially within CI/CD environments. Highlight specific tools you've used, such as Burp Suite or ZAP, and be ready to explain how you've applied them in real-world scenarios.
✨Understand the Role of Security in SDLC
Demonstrate your understanding of integrating security into the software development lifecycle. Discuss how you can shift security left and provide examples of how you've guided engineering teams in secure design practices.
✨Engage with Practical Examples
Prepare to share practical examples of threat modelling and security testing you've conducted. This could include discussing specific vulnerabilities you've identified and how you communicated these to development teams in a developer-friendly manner.
✨Familiarity with Tools and Technologies
Make sure to mention your proficiency in Python or similar languages, as well as your experience with GitHub. If you're familiar with Splunk, discuss how you've used it to visualise risk, or express your willingness to learn if you haven't worked with it yet.
