Bluetree Group

DevOps Engineer

• Take technical ownership of security findings across cloud, application, and internal environments
• Triage and prioritise findings by real risk
• Deliver remediation fixes directly wherever possible and coordinate with other teams when needed
• Fix issues within agreed severity-based timescales
• Report open findings and their age to leadership monthly
• Introduce automated controls, tests, and monitoring to prevent recurring security issues
• Implement and maintain automated security scanning across CI/CD pipelines for application code, dependencies, containers, and IaC
• Configure and tune security tooling to identify genuine risks without unnecessarily slowing development
• Set guardrails for AI-written code, including dependency checks and access limits for AI coding tools and agents
• Harden pipelines through branch protection, least-privilege permissions, and short-lived deployment credentials
• Own AWS environment security, including IAM, S3 access, logging, and threat detection
• Review infrastructure against benchmarks such as CIS and implement required configuration changes
• Use automation and IaC for consistent, repeatable security improvements
• Assess and improve application API and third-party integration security
• Own vulnerability scanning output and work with IT to patch and correctly configure internal systems
• Work closely with website, internal systems, and IT teams to agree priorities and implement changes

Explore DevSecOps Engineer at Bluetree Group. Review requirements and application details.

Open roles

DevSecOps Engineer