DevSecOps Engineer, Immediate Media Co

• This is a hands-on role for someone passionate about automation, cloud operations, and security by design
• Strong background in cloud infrastructure (AWS preferred: EC2, Lambda, RDS, Route53, ELBs, EKS)
• Proven experience with CI/CD automation and infrastructure-as-code (Terraform, Ansible, Jenkins, Git/GitHub)
• Proficiency in containerisation (Docker, Kubernetes) and managing production workloads
• Solid understanding of security frameworks (CIS, OWASP) and common vulnerabilities (OWASP Top 10, misconfigurations, supply chain risks)
• Experience with application and infrastructure monitoring (e.g., Prometheus, Grafana, ELK, CloudWatch)
• Knowledge of Linux-based systems (LAMP stack, Nginx, Varnish, MySQL/Postgres, Mongo) with performance tuning and hardening experience
• Strong grasp of networking and security protocols (TCP/IP, SSL/TLS, DNS, NAT, firewalls, load balancers, WAFs)
• Familiarity with code security tools (SAST, DAST, dependency scanners) and integrating them into pipelines
• Excellent problem-solving, communication, and cross-team collaboration skills
• Disaster recovery process and GDPR

Desirable

• We are seeking a DevSecOps Engineer to join our growing Platforms & Security team
• You’ll be responsible for ensuring our platforms, products, and infrastructure are secure, resilient, and scalable while working closely with developers, QA, and product teams
• You’ll combine DevOps best practices with modern security engineering approaches to embed security throughout the software delivery lifecycle, strengthen our cloud infrastructure, and proactively protect our customers’ data
• Design, build, and maintain secure and scalable infrastructure in AWS using Terraform, Kubernetes, and Docker
• Embed security into the CI/CD pipeline (Jenkins, GitHub Actions, CodePipeline) including SAST/DAST and dependency scanning
• Collaborate with developers and product teams to promote DevSecOps practices, threat modelling, and secure coding standards
• Conduct security assessments of applications, services, and infrastructure, identifying vulnerabilities and recommending remediation
• Operate, tune, and extend monitoring, logging, and alerting systems for both performance and security
• Manage DNS, CDN, caching, firewalls, load balancers, and WAFs to ensure secure and performant web delivery
• Respond to and resolve security incidents and platform issues, driving continuous improvement and automation of responses
• Keep documentation current, including runbooks, incident playbooks, and security procedures
• Stay ahead of industry trends, emerging threats, and new DevSecOps tools