Security Engineer - DevSecOps/Code Security
Keystone Recruitment Partners Ltd
About This Role
Security Engineer - DevSecOps
We are seeking a highly skilled Security Engineer with strong software engineering foundations and deep expertise in secure development practices. The successful candidate will have hands-on experience with source code management, CI/CD pipelines, cloud-native environments, and secure code review processes. You will play a key role in identifying vulnerabilities, improving developer security practices, and embedding security into modern engineering workflows.
Required Skills & Experience
Technical Skills
- Expert-level knowledge of Git and modern version control workflows
- Strong frontend and backend development experience
- Hands-on application security experience in modern engineering environments
- Experience performing manual and automated secure code reviews
- Practical experience with Wiz Code
- Strong Python scripting and automation skills
- Experience with Kubernetes security and containerised environments
- Strong AWS cloud security knowledge
- Solid understanding of CI/CD pipelines and DevSecOps principles
- Familiarity with software engineering best practices and SDLC processes
Security Expertise
- Secure coding practices and vulnerability remediation
- OWASP Top 10 and common application security risks
- Static and dynamic application security testing concepts
- Secrets management and dependency security
- Threat modelling and risk analysis
Soft Skills
- Ability to communicate effectively with developers and engineering leadership
- Strong analytical and problem-solving skills
- Collaborative mindset with a pragmatic approach to security
- Ability to balance security requirements with engineering productivity
Preferred Qualifications
- Experience working in high-scale cloud-native environments
- Familiarity with Infrastructure as Code (Terraform, CloudFormation, etc.)
- Knowledge of container security and Kubernetes hardening
- Experience integrating security tools into developer workflows
Ideal Candidate Profile
You are someone who:
- Thinks like an engineer and understands developer challenges
- Can read, understand, and assess production-grade code
- Is comfortable working across security, infrastructure, and engineering teams
- Enjoy improving developer security practices through collaboration rather than gatekeeping
- Understands modern DevSecOps and cloud-native application architectures
Application opens at the source listing. Free for jobseekers.