Senior DevSecOps Engineer

Responsibilities

• Design, build, and operate secure development and deployment infrastructure for autonomy and defence programmes.
• Develop and maintain secure, repeatable CI/CD pipelines for autonomy and mission software.
• Embed security controls, testing, evidence, and assurance throughout the software development lifecycle.
• Apply UK Ministry of Defence Secure by Design principles and support engineering teams with cybersecurity and technical assurance responsibilities.
• Collaborate with software, autonomy, systems, cybersecurity, integration, and test engineers.
• Design and maintain environments across cloud, on-premises infrastructure, laboratories, simulation, hardware-in-the-loop, and operational platforms.
• Enable secure development and deployment across different security classifications and segmented environments.
• Automate security controls in CI/CD pipelines, including static analysis, dependency scanning, container scanning, secrets detection, software composition analysis, vulnerability management, and policy enforcement.
• Promote engineering ownership of security, reliability, deployability, and operational performance.

Requirements

• Bachelor's or master's degree in Computer Science, Software Engineering, Cybersecurity, Electrical Engineering, Systems Engineering, or a related technical discipline, or equivalent practical experience.
• 5+ years of experience in DevOps, DevSecOps, platform engineering, site reliability engineering, software engineering, or a related discipline.
• Significant experience delivering software or digital capabilities in UK defence or another highly regulated national security environment.
• Strong understanding of the UK Ministry of Defence/NATO approach to DevSecOps and Secure by Design.
• Experience integrating cybersecurity, risk management, MOD security policies, security assurance processes, and technical security requirements into software-intensive defence programmes.
• Experience developing and operating CI/CD pipelines using source control, build, testing, artifact management, and deployment technologies.
• Strong understanding of Infrastructure as Code, configuration management, containerization, and infrastructure automation.
• Experience with Git, GitLab, GitHub, or equivalent tools.

Nice-to-haves

• Experience supporting DevSecOps, software delivery, or digital engineering across NATO nations or multinational defence programmes.
• Understanding of DevSecOps approaches, security frameworks, and software assurance practices used by other NATO nations, particularly the United States and European NATO partners.