DevSecOps Engineer

DevSecOps Engineer

Location: London (Hybrid 2-3 Days Per Week)

Salary: £65,000 - £90,000 + Benefits

Type: Permanent

About the Company

167 Solutions is partnering with an innovative technology organisation that is scaling its cloud engineering and platform capabilities. We are seeking a hands-on DevSecOps Engineer who can embed security directly into the software development life cycle while remaining actively involved in engineering, automation, cloud infrastructure, and platform delivery.

This is not a traditional security administration or governance role. We are looking for an engineer who writes code, builds automation, develops cloud-native solutions, and integrates security into modern software delivery practices.

The Opportunity

As a DevSecOps Engineer, you will work closely with Software Engineers, Platform Engineers, Cloud Architects, and Security teams to build secure-by-design solutions across AWS environments.

You will be responsible for automating security controls, improving cloud security posture, developing CI/CD pipelines, and implementing security tooling within a fast-paced engineering environment.

The successful candidate will have strong software engineering capabilities alongside cloud and security expertise.

Key Responsibilities

Design, build and maintain secure AWS cloud infrastructure.

Develop and maintain Infrastructure as Code using Terraform and AWS-native tooling.

Build security controls directly into CI/CD pipelines.

Develop automation scripts and tooling using Python, Go, TypeScript, or similar languages.

Implement container security across Kubernetes and Docker environments.

Integrate security scanning, vulnerability management, and compliance controls into engineering workflows.

Collaborate with software development teams to improve secure coding practices.

Develop and maintain monitoring, logging, and incident response automation.

Support threat modelling and secure architecture reviews.

Drive DevSecOps best practices across engineering teams.

Contribute to platform engineering and cloud-native application delivery.

Required Experience

Proven experience in a DevSecOps, Platform Engineering, Site Reliability Engineering, or Software Engineering role.

Strong AWS experience including services such as:

IAM

ECS/EKS

Lambda

CloudWatch

VPC

Secrets Manager

Security Hub

GuardDuty

Hands-on software development experience using:

Python

Go

TypeScript

Java (desirable)

Strong Terraform and Infrastructure as Code experience.

Experience building and maintaining CI/CD pipelines.

Experience with Docker and Kubernetes.

Strong understanding of secure software development practices.

Experience integrating security tooling into development workflows.

Familiarity with modern observability and monitoring platforms.

Desirable Experience

AWS Security Speciality certification.

Experience with Open Policy Agent (OPA).

Experience with GitHub Actions, GitLab CI or Jenkins.

Knowledge of container runtime security.

Experience within highly regulated or enterprise-scale environments.

Exposure to cloud-native security platforms and zero-trust architectures.

Understanding of SOC2, ISO27001, NIST or Cyber Essentials frameworks.

What Success Looks Like

Security becomes embedded within the engineering life cycle rather than acting as a gatekeeper.

Automated controls reduce risk without slowing delivery.

Development teams can deploy securely and confidently.

Cloud environments remain scalable, resilient, and secure by design.

Engineering and security teams operate as a single delivery function.

Why Apply?

Work on modern AWS cloud platforms.

Engineering-first culture.

Opportunity to shape DevSecOps practices across the organisation.

Significant investment in cloud, platform, and security capabilities.

Exposure to cutting-edge automation and cloud-native technologies.

Genuine influence on technical direction and security strategy.