At a Glance
- Tasks: Join a dynamic team to enhance security in software development and release processes.
- Company: Established tech business in Cambridge with a focus on innovation.
- Benefits: Competitive salary, flexible work schedule, and opportunities for professional growth.
- Other info: Exciting role with potential for career advancement in a collaborative environment.
- Why this job: Make a real impact by integrating security into cutting-edge technology projects.
- Qualifications: 3+ years in DevOps/DevSecOps with strong Linux and CI/CD experience.
I’m working with an established technology business in Cambridge that’s looking to bring in a DevSecOps Engineer to join their growing DevOps team. This is a hands-on, mid-level role for someone with solid Linux and CI/CD experience who wants to develop further within DevSecOps and security. You’ll be working across embedded, desktop and web products, helping build security into the development and release process.
What you’ll be doing:
- Build and improve CI/CD pipelines across GitLab CI / TeamCity
- Integrate security scanning including SAST, SCA, DAST, vulnerability scanning and SBOMs
- Investigate CVEs and work with development teams on remediation
- Harden Linux systems and support security/compliance requirements
- Maintain Linux and Windows build infrastructure
- Work with Docker, infrastructure-as-code and automated tooling
- Help improve software supply-chain security, secrets management and release processes
- Review infrastructure, pipeline and application changes
- Create clear technical documentation and runbooks
What they’re looking for:
- 3+ years in DevOps, DevSecOps, Platform, Build/Release or similar
- Strong hands-on Linux experience
- Good CI/CD experience – GitLab CI, TeamCity, Jenkins, GitHub Actions or similar
- Strong Python and Bash scripting
- Working knowledge of Docker
- Understanding of security tooling such as SAST, vulnerability/dependency scanning and CVE management
- Good understanding of security fundamentals including least privilege, secrets management and patching
- Comfortable working with Git and troubleshooting unfamiliar systems
Useful but not essential:
- NIST, DISA STIGs, CIS, FIPS, ISO 27001 or Cyber Essentials Plus
- Tools such as Trivy, Semgrep, SonarQube, Nessus, OWASP ZAP or OpenSCAP
- Terraform or Ansible
- AWS / VMware / Proxmox
- Windows build environments and PowerShell
- Embedded Linux C/C++, Rust, .NET or JavaScript/TypeScript build environments
- Experience within defence, aerospace or another regulated environment
DevSecOps Engineer in Cambridge employer: SoCode Limited
As a leading technology firm at the forefront of radar innovation, we pride ourselves on fostering a collaborative and dynamic work environment that encourages creativity and technical excellence. Our hybrid work model allows for flexibility while maintaining strong team cohesion, and we offer ample opportunities for professional growth through challenging projects and continuous learning. Join us to be part of a mission-driven team where your contributions directly impact cutting-edge solutions in the security and defence sectors.
StudySmarter Expert Advice🤫
We think this is how you could land DevSecOps Engineer in Cambridge
✨Join Local Tech Meetups
Get out there and mingle with fellow developers by joining local tech meetups. It’s a fantastic way to meet people who might be working at SoCode Limited or know someone who does. Plus, you can pick up some trendy tech skills and trends while you're at it!
✨Contribute to Open Source Projects
Show off your coding chops by jumping into open-source projects. Not only does this give you practical experience, but it also gets you noticed in the dev community. You'll create a killer portfolio that speaks volumes about your skills to SoCode Limited.
✨Tap into Online Developer Communities
Don’t underestimate the power of online developer communities like GitHub, Stack Overflow, and even Reddit. Participate in discussions, share your projects, and build your visibility. We can often find opportunities through these channels that can lead to a full-time gig at companies like SoCode Limited.
✨Explore Job Boards Specifically for Tech Roles
Keep your eyes peeled on job boards that focus on tech roles. Sites like TechCareers or Stack Overflow Jobs can often have listings for companies like SoCode Limited that might not show up on broader job sites. Make it a habit to check these regularly, and don’t hesitate to apply directly through our website!
We think you need these skills to ace DevSecOps Engineer in Cambridge
Some tips for your application 🫡
Show off your coding skills:When applying for a software engineering role, it's super important to showcase your coding skills. Make sure your CV includes your tech stack, any relevant programming languages you’re comfortable with, and examples of projects you've worked on. If you have a GitHub profile, link it up! We love to see code in action.
Tailor your portfolio:For a full-time role, we’d expect to see some solid examples of your work in your portfolio. Make sure to include at least two or three projects that highlight your problem-solving skills and your ability to work with different technologies. Focus on the projects that are most relevant to the position at SoCode Limited.
Craft a killer cover letter:Your cover letter is your chance to stand out—make it personal! Explain why you want to work at SoCode Limited and how your skills align with the role. Show us your passion for software development. We dig enthusiastic candidates who understand the value of collaboration and continuous learning!
Be clear and concise:When it comes to writing your CV and cover letter, clarity is key. Avoid jargon that could confuse us and stick to simple, direct language. Highlight your achievements with quantifiable results where possible, and keep everything easy to read. A well-organised application goes a long way!
How to prepare for a job interview at SoCode Limited
✨Brush Up on Your Coding Skills
For a full-time software engineering role, it's crucial that we stay sharp with our coding abilities. Expect technical questions that might involve solving problems on the spot or discussing algorithms. Practise on platforms like LeetCode or HackerRank to get comfortable with the types of questions that often come up.
✨Know Your Tools and Frameworks
Make sure we’re well-acquainted with the tools and technologies listed in the job description. Familiarise ourselves with any specific frameworks or programming languages mentioned. If SoCode Limited uses React or Node.js, for instance, be ready to discuss how we’ve used them in previous projects or coursework.
✨Showcase Your Projects
Bring along a portfolio that highlights our best work. This could be code samples, GitHub repositories, or any side projects we’ve built. Make sure we can talk through our thought process for each project, especially the challenges we faced and how we solved them—this shows our problem-solving skills in action.
✨Prepare for Behavioural Questions
While technical skills are key, full-time positions also require cultural fit. Be ready to discuss our previous experiences and how we handle teamwork, conflict, and deadlines. Brush up on the STAR method—Situation, Task, Action, Result—to clearly articulate our past experiences when discussing how we've contributed to a team.
