Overview
Contract Type Permanent
Location Hybrid (remote and on-site – Westminster, London)
As a DevSecOps Engineer, you’ll help secure the digital services that support the day-to-day work of UK Parliament. Embedded within the Software Engineering team, you’ll act as a security partner to developers — ensuring security is built into services from the start, not added at the end.
Working across a bespoke Microsoft-focused environment including C#, .NET, .NET Core and .NET Framework, alongside MVC and Web API applications, SQL Server, RESTful APIs and Git-based workflows, you’ll support teams in delivering secure, resilient software at pace. You’ll provide practical guidance on secure design, code quality, and platform security, helping shift security expertise into every stage of the development lifecycle.
Collaborating closely with engineering teams and cyber security specialists, you’ll help strengthen DevSecOps practices across Parliament — influencing architecture, supporting testing activities, and promoting secure coding approaches that enable teams to deliver with confidence.
If you enjoy working hands-on with engineers, solving real security challenges, and helping teams build secure services the right way from day one, this role offers the chance to make a meaningful impact in a nationally significant environment.
Responsibilities
- relevant experience across the bespoke technology stack (see above). Also, have a good understanding of cyber security principles as a whole, but especially as they relate to DevSecOps.
- security Integration: Ensure security is integrated into every stage of the software development lifecycle (SDLC), from initial design to deployment and maintenance
- automation: Implement and manage automation tools to streamline security processes, such as continuous integration/continuous deployment (CI/CD) pipelines
- vulnerability Management: Identify, assess, and mitigate security vulnerabilities in applications and infrastructure
- good knowledge and experience of delivering secure software products in a demanding environment
Qualifications
- understanding of cyber and information security principles and how they underpin all digital activities, including an appreciation of cyber and information security functions / activities and how they mitigate likelihood and impact of cyber attacks, especially in a DevSecOps environment.
- demonstratable experience across C#, .NET, .NET Core and .NET Framework, web frameworks including MVC and Web API, SQL / SQL Server experience in best practice of securing both web applications and APIs, experience of configuring monitoring and proactive alerting tools based on security events, Git, abstracting code into core libraries and creating reusable components, debugging and systems analysis, knowledge of common vulnerabilities and threats. Experience of configuring CI/CD tooling and security best practice.
- strong interpersonal skills with proven ability to establish positive working relationships and influence and persuade at all levels.
- excellent written and verbal communication skills with the ability to present complex information clearly and effectively.
- takes ownership of problems and proactively resolves technical problems, ensuring that technical solutions continue to meet business requirements. Takes full accountability for actions taken and decisions made.
- the ability to pass security clearance, backed by the right to work in the UK
Benefits
- generous annual leave starting at 30 days and increasing to 35 days in addition to bank holidays
- generous maternity pay policy up to 6 months full pay
- enrolment in the Civil Service pension scheme with an average employer contribution of 27%
- on-site gym, nursery, catering, post office, travel office and GP
- flexible options including hybrid working and family friendly policies
#J-18808-Ljbffr…