About Company
Career.zycto empowers innovation by fostering a culture where cutting-edge technology meets robust security. For a DevSecOps Engineer, this means an environment ripe for impact, where your expertise in automating security into every development phase is not just valued, but essential. We’re building the future, and we need your vigilance to make it secure. Join a collaborative team where continuous improvement and professional growth are at our core, and your contributions directly enhance the integrity and resilience of our critical systems. This is where your passion for secure software delivery thrives, shaping the backbone of our digital infrastructure.
Job Description
Are you a passionate and experienced DevSecOps Engineer looking to significantly impact the security and efficiency of software delivery? Career.zycto is seeking a proactive and skilled individual to join our dynamic team in Swansea, Wales. In this pivotal role, you will be instrumental in integrating security practices throughout the entire software development lifecycle, ensuring our applications are not only robust and scalable but also inherently secure from inception to deployment.
As a DevSecOps Engineer, you will champion a culture of security, automating security checks and processes within our continuous integration and continuous deployment (CI/CD) pipelines. This involves designing, implementing, and maintaining automated security tools and frameworks, conducting security assessments, and guiding development teams on secure coding practices. You will collaborate closely with development, operations, and security teams, fostering a shared responsibility for security and ensuring compliance with industry standards and regulations.
Your daily activities will span identifying potential security vulnerabilities in code, infrastructure, and configurations, implementing preventative measures, and responding to security incidents with agility. We rely on your expertise to select and implement appropriate security tools, configure them effectively, and interpret their outputs to drive tangible improvements. This role requires a strong understanding of cloud environments (AWS, Azure, or GCP), containerization technologies like Docker and Kubernetes, and infrastructure-as-code principles.
We are looking for someone who thrives on solving complex problems, possesses excellent communication skills, and is adept at translating technical security requirements into actionable strategies. You will play a key part in defining our security roadmap, driving innovation in secure development, and continuously enhancing our security posture. If you are committed to building secure, high-quality software, and are eager to contribute to an environment that values continuous learning and proactive security, we encourage you to apply and help us secure the future of our digital services.
Key Responsibilities
- Design, implement, and manage secure CI/CD pipelines, automating security gates and tools.
- Perform security assessments, vulnerability scanning, and penetration testing on applications and infrastructure.
- Collaborate with development teams to integrate security best practices into software design and coding.
- Administer and optimize cloud security configurations across platforms like AWS, Azure, or GCP.
- Develop and maintain infrastructure as code (IaC) with a focus on security principles (e.g., Terraform, CloudFormation).
- Monitor systems for security incidents, respond effectively, and conduct post-incident analysis.
- Stay updated on emerging security threats, technologies, and regulations, applying relevant insights.
- Advise on data protection and privacy compliance (e.g., GDPR) within development processes.
- Implement and manage security tools for static application security testing (SAST), dynamic application security testing (DAST), and software composition analysis (SCA).
Required Skills
- Proficiency in cloud platforms (AWS, Azure, or GCP)
- Strong experience with CI/CD tools (e.g., Jenkins, GitLab CI, GitHub Actions, Azure DevOps)
- Expertise in scripting languages (e.g., Python, Bash, Go)
- Solid understanding of containerization and orchestration (Docker, Kubernetes)
- Familiarity with IaC tools (e.g., Terraform, Ansible)
- Experience with security tools (SAST, DAST, SCA, WAFs, IDS/IPS)
- Knowledge of networking protocols and security best practices
- Understanding of common security vulnerabilities and attack vectors (OWASP Top 10)
- Excellent problem-solving and communication skills
Preferred Qualifications
- Relevant security certifications (e.g., CompTIA Security+, CISSP, CCSP, AWS Certified Security – Specialty)
- Experience with compliance frameworks (e.g., SOC 2, ISO 27001)
- Background in software development or operations engineering
- Experience with security monitoring and SIEM tools
- Contributions to open-source security projects or communities
Perks & Benefits
- Competitive salary and performance-based bonuses
- Comprehensive health and dental insurance
- Generous pension contribution scheme
- Flexible working arrangements (core hours, possibility of occasional remote work)
- Professional development budget for courses, conferences, and certifications
- 25 days annual leave plus public holidays
- Modern office environment with collaborative workspaces
- Employee assistance program
- Regular social events and team-building activities
How to Apply
Ready to make an impact? Please click on the application link below to submit your resume and cover letter. We look forward to reviewing your qualifications and discussing how you can contribute to our team.
