DevSecOps Engineer

Bluetree Group

. Take technical ownership of security findings across cloud, application, and internal environments .

Posted 11/10/2026full-timeRotherham • United KingdomMid-LevelSenior💰 £65,000 - £95,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates strong technical ownership of security across cloud and application environments, with hands-on experience in AWS security, CI/CD pipeline management, and implementing automated security controls. Proficient in vulnerability scanning, Infrastructure as Code, and prioritizing security risks effectively.

Highest-signal resume keywords

AWS Security ExperienceCI/CD Pipeline ManagementInfrastructure as Code SecurityVulnerability ScanningAutomated Security Controls

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

AWS IAMAWS S3AWS CloudTrailAWS GuardDutyAWS Security HubAWS ConfigSASTSCATerraformDocker

Soft Skills

Risk PrioritizationOwnership

Tools & Technologies

GitHub ActionsJenkinsTeamCityAzure DevOps

Certifications & Qualifications

AWS Certified Security – Specialty

Industry Keywords

Cyber Essentials PlusISO 27001PCI DSS

Tech Stack

Tools & technologies

AWSAzureCloudDockerJavaJenkinsTerraformGo

About the role

Key responsibilities & impact

Take technical ownership of security findings across cloud, application, and internal environments
Triage and prioritise findings by real risk
Deliver remediation fixes directly wherever possible and coordinate with other teams when needed
Fix issues within agreed severity-based timescales
Report open findings and their age to leadership monthly
Introduce automated controls, tests, and monitoring to prevent recurring security issues
Implement and maintain automated security scanning across CI/CD pipelines for application code, dependencies, containers, and IaC
Configure and tune security tooling to identify genuine risks without unnecessarily slowing development
Set guardrails for AI-written code, including dependency checks and access limits for AI coding tools and agents
Harden pipelines through branch protection, least-privilege permissions, and short-lived deployment credentials
Own AWS environment security, including IAM, S3 access, logging, and threat detection
Review infrastructure against benchmarks such as CIS and implement required configuration changes
Use automation and IaC for consistent, repeatable security improvements
Assess and improve application API and third-party integration security
Own vulnerability scanning output and work with IT to patch and correctly configure internal systems
Work closely with website, internal systems, and IT teams to agree priorities and implement changes

Requirements

What you’ll need

Strong experience, typically 4+ years, across DevOps or cloud engineering with a significant focus on security
Hands-on AWS security experience, including IAM, S3, CloudTrail, GuardDuty, Security Hub, and AWS Config
Hands-on ownership of CI/CD pipelines, such as GitHub Actions, Jenkins, TeamCity, or Azure DevOps
Experience adding security gates to CI/CD pipelines
Practical experience implementing and managing SAST, SCA, secrets scanning, and Infrastructure as Code security scanning
Ability to read and fix application code in at least one modern language, such as C#, Java, or Go
Experience with Infrastructure as Code, such as Terraform, CloudFormation, or Pulumi
Knowledge of containerisation, such as Docker, and securing images and container workloads
Understanding of security risks introduced by AI-assisted development and how to manage them
Ability to prioritise by real risk and take ownership of fixes
Security certifications such as AWS Certified Security – Specialty are beneficial but not essential
Experience with Cyber Essentials Plus, ISO 27001, or PCI DSS is beneficial but not essential

Benefits

Comp & perks

Flexible, hybrid working
Health Cash Plan
Comprehensive wellbeing support, including onsite training and free external support
Enhanced maternity, paternity, and adoption packages
22 days annual leave plus Bank Holidays
Length of Service programme with additional days
Regular team socials
Annual Summer and Christmas Parties
Biennial Long Service celebrations
Company pension scheme
Bluetree Rewards discounts
Weekend break giveaways
Long-service gifts starting from year 1
Internal and external training opportunities
Cycle to Work scheme
Weekly football team
Free fruit, snacks, and beverages in the modern canteen
Free onsite parking
24/7 threat monitoring handled by a managed detection partner
Investment in modern security tooling