DevSecOps Engineer

Job ID: 1016Req ID: 142Location: London, UK; Chatham, UK; Petersfield, UK; Bradford, UKPosted: 2026-11-06Job Family: DevelopmentPay Type: Salary THE NEXT CHAPTER STARTS WITH YOU DevSecOps Engineer Embed security, automation and resilience into the technology powering the next chapter of VanquisWe've invested in modernising our technology landscape.

The opportunity now is to strengthen how security is integrated across development and operations, helping teams deliver reliable change with confidence. As a DevSecOps Engineer, you'll build secure Infrastructure as Code, contribute to CI/CD design, integrate security tooling and automated controls, and improve monitoring and incident response.

You'll work across technical disciplines to protect software, data and customer outcomes while improving delivery performance and cost-effectiveness. There's More to the Story This role is part of a wider Technology & Change transformation, strengthening engineering foundations and building capabilities that can deliver value safely and sustainably.

How you'll make an impact You'll... So that... Integrate security controls and tooling into CI/CD pipelines, automated testing and deployment processesVulnerabilities are identified earlier and software can move through delivery with stronger security assurance.

Develop secure, scalable Infrastructure as Code and automation using tools such as Terraform or CloudFormationInfrastructure is provisioned consistently, efficiently and with security, reliability and cost in mind. Implement monitoring, logging and alerting across development, test and production environmentsTeams can identify issues quickly, respond proactively and reduce customer or operational impact.

Carry out vulnerability assessments and help define proportionate risk-mitigation actionsSecurity risks are understood, prioritised and addressed before they become incidents. Support security incident response and troubleshoot complex infrastructure and deployment issuesIncidents are contained and resolved quickly, with clear learning fed back into engineering practices.

Collaborate with Product, Engineering, Technology & Change peers and third-party partnersSecurity becomes a shared responsibility and continuous improvement is embedded across delivery. Why this role matters Security must be built into modern software delivery.

This role helps teams find vulnerabilities earlier, automate repeatable controls, improve service reliability and respond quickly when incidents occur. The result is safer change, stronger protection for critical assets and clearer compliance evidence.

Our DevSecOps approach We believe in What that means Secure by designSecurity controls are built into delivery rather than added at the end. Automation firstRepeatable work is automated to improve speed, consistency and control.

Everything as codeInfrastructure and configuration are versioned, reviewable and reproducible. Observable servicesMonitoring, logging and alerting support early detection and faster recovery. Shared ownershipEngineering, product, operations and security work together to manage risk.

Technology stack Platforms & engineering Security & operations TerraformSecurity scanning and vulnerability assessmentPython and automation scriptingAccess control, authentication and encryptionCircleCI and GitMonitoring, logging and alertingAWS, Azure and GCPIncident response and risk mitigationDocker, Kubernetes, Istio and ArgoCDSecure configuration and continuity planning Essential experience Experience with cloud platforms such as AWS, Azure or GCP and container technologies such as Docker.

Hands-on experience with Infrastructure as Code, ideally Terraform or CloudFormation, and automation scripting in a language such as Python. Practical knowledge of CI/CD tooling, Git-based version control and secure software delivery practices.

Experience with security scanning, vulnerability assessment, monitoring, logging and incident response. Strong understanding of security principles, including encryption, access controls, authentication and infrastructure security.

Strong analytical and problem-solving skills, with the ability to diagnose complex infrastructure, deployment and security issues. Confident collaboration across engineering, product, operations, security and third-party teams.

Useful, but not essential Experience with orchestration technologies and modern cloud-native delivery patterns. Knowledge of SRE principles, service reliability, capacity management and continuity planning. Experience working in financial services or another regulated technology environment.

Relevant cloud, security, DevOps or infrastructure certification. Degree, equivalent professional qualification or substantial relevant work experience. Career development You will have opportunities to deepen your expertise across cloud security, automation, Infrastructure as Code and SRE practices, contribute to tooling decisions, lead improvement activity and provide guidance to junior DevSecOps engineers.

Why Vanquis? Benefits & culture Learning & wellbeing Award-winning employerLinkedIn LearningFlexible workingTwo volunteering daysInclusive cultureEnhanced family leaveUp to 10% pension contributionPaid birthday leave25-30 days annual leaveCareer development opportunities Ready to shape what's next?

If you're looking for an opportunity to combine cloud engineering, automation and security while helping shape modern technology delivery at Vanquis, we'd love to hear from you. Recruitment agency information Our Talent Acquisition team manages all recruitment activity directly.

We work with approved recruitment partners where additional support is required. Unsolicited CVs submitted without prior agreement from Vanquis Talent Acquisition will be considered direct applications and no agency fees will be payable.

The Next Chapter Starts with You. #YourVanquis. The Bank that's got your back. For our customers. For our colleagues. For what comes next. Build your future. Shape ours.

Report this job