DevSecOps Engineer

Strativ are working with an innovative defence technology company in London that are building advanced autonomous systems.

We are looking for a Senior DevSecOps Engineer to join their engineering team and own the secure software delivery infrastructure behind mission-critical autonomy programmes.

This role sits at the intersection of software engineering, platform engineering, cyber security and defence systems engineering.

We are looking for someone who has a strong software and platform engineering background with solid experience in UK defence environments. You ideally need to understand the UK MOD/NATO approach to DevSecOps, Secure by Design, cyber risk management and security assurance, and have experience delivering software into classified and operational settings.

Responsibilities:

• Designing, building and operating secure development and deployment infrastructure for autonomy and defence programmes
• Developing and maintaining CI/CD pipelines for rapid, repeatable and secure delivery of autonomy and mission software
• Embedding security throughout the software development lifecycle, with controls, testing, evidence and assurance built into engineering workflows rather than treated as a separate activity
• Applying UK MOD Secure by Design principles and helping engineering teams understand their cyber security and technical assurance responsibilities
• Working closely with software, autonomy, systems, cyber security, integration and test engineers to create development environments that support speed while meeting defence security requirements
• Designing and maintaining environments across cloud, on-premises infrastructure, labs, simulation, hardware-in-the-loop and operational platforms
• Enabling secure development and deployment across different security classifications and segmented environments
• Implementing automated security controls in CI/CD pipelines, including static analysis, dependency, container and secrets scanning, software composition analysis, vulnerability management and policy enforcement

Skills Required:

• BS or MS in Computer Science, Software Engineering, Cyber Security, Electrical Engineering, Systems Engineering or a related discipline, or equivalent practical experience
• Significant experience delivering software or digital capabilities within UK defence or another highly regulated national security environment
• Strong understanding of the UK MOD/NATO approach to DevSecOps and Secure by Design, including integrating cyber security and risk management across the capability lifecycle
• Experience applying MOD security policies, assurance processes and technical security requirements to software-intensive defence programmes
• Hands-on experience building and running CI/CD pipelines using modern source control, build, test, artefact management and deployment tooling
• Strong grasp of Infrastructure as Code, configuration management, containerisation and infrastructure automation
• Experience with Git, GitLab or GitHub, or equivalent tooling
• Experience supporting DevSecOps, software delivery or digital engineering across NATO nations or multinational defence programmes
• Familiarity with the DevSecOps approaches, security frameworks and software assurance practices of other NATO partners, particularly the US and European allies

#J-18808-Ljbffr