DevSecOps Engineer
Sense Street
full-time
Posted on:
Location Type: Hybrid
Location: London • United Kingdom
Visit company websiteExplore more
About the role
- Design, build, and maintain reliable, scalable, secure cloud and on-premise infrastructure and services
- Devise key principles and tenets that underpin Sense Street’s architecture from current customers’ needs to the future of financial markets.
- Integrate DevOps best practices and security across the SDLC: Automate infrastructure provisioning, deployments, integration testing and other operational workflows.
- Implement automated security checks and controls in build/test/deploy/release pipelines to catch issues and vulnerabilities early, and ensure secure releases.
- Identify and reduce operational toil through tooling and automation.
- Define and enforce secure configurations using Infrastructure as Code (IaC), hardening cloud and on-premise environments, container platforms (e.g., Kubernetes, Docker), codebase, and IAM policies.
- Improve infrastructure and service observability, monitor and respond to alerts and issues: Enable continuous monitoring, metrics, logging, distributed tracing and alerting for performance, availability and security incidents, and support incident response procedures.
- Lead incident response, postmortems, security and reliability improvements.
- Perform automated security scans and testing, and drive vulnerability assessments, risk analysis, and penetration testing to uncover and mitigate security gaps in our services, APIs and applications.
- Run gamedays to ensure availability SLAs as users and transactions increase, and failures occur (e.g. network failure, latency injection etc.).
- Work with developers, data scientists, IT administrators and support, and other DevSecOps / Site Reliability Engineers to provide guidance on secure coding and DevOps practices, and high availability and security architecture patterns.
- Create and maintain best DevOps practices and security standards, runbooks, and internal training to foster a “secure by design” DevOps culture.
- Ensure alignment with relevant regulatory and enterprise standards (e.g., ISO27001, GDPR, SOC2) as the business scales.
Requirements
- Proven experience in DevOps, Security Engineering and/or DevSecOps roles.
- Strong scripting skills (Python, Bash, etc.) and IaC tools (AWS CDK / Cloud Formation, Terraform etc.) for automation.
- Hands-on experience with CI/CD tools (e.g., GitLab CI/CD, GitHub Actions, Jenkins).
- Experience with cloud platforms (AWS, GCP, Azure) and cloud security best practices.
- Familiar with container orchestration and security (Docker, Kubernetes).
- Knowledge of secure, scalable and high availability architecture patterns.
- Observability tools and best practices.
- Chaos engineering and performance scalability testing and gamedays.
- Logs and metrics graphs analysis, issue diagnostics and troubleshooting.
- Strong analytical capabilities.
- Understanding of authentication/authorization frameworks and cryptographic practices.
- Familiarity with compliance standards and secure development frameworks.
Benefits
- 📊 Check your resume score for this job Improve your chances of getting an interview by checking your resume score before you apply. Check Resume Score
Applicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills & Tools
DevOpsSecurity EngineeringDevSecOpsscripting (Python, Bash)Infrastructure as Code (IaC)CI/CD tools (GitLab CI/CD, GitHub Actions, Jenkins)cloud platforms (AWS, GCP, Azure)container orchestration (Docker, Kubernetes)observability toolschaos engineering
Soft Skills
analytical capabilitiesleadershipguidanceincident responsecollaboration
Certifications
ISO27001GDPRSOC2