SunCore Digital
Dev/Sec/Ops and Threat Engineering Specialist

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Dev/Sec/Ops and Threat Engineering Specialist
Location: Remote (Global)
Offices: London, UK and Bellevue, WA
Employment Type: Full-time, ongoing hire
Company: SunCore Digital
Role Overview
SunCore Digital is strengthening its security and infrastructure foundation as we prepare for rapid scale across our global operations in London, Bellevue, and remote engineering hubs worldwide. We are hiring a Senior Dev/Sec/Ops and Threat Engineering Specialist who can blend DevOps, security engineering, penetration testing, and threat modeling into a unified, proactive security posture.
This role will work closely with engineering, product, design, marketing, operations, and compliance teams to secure our cloud environments, automate infrastructure, support our web and mobile app ecosystem, and ensure our systems remain resilient as we scale. You will also support the secure build-out of SunCore’s dashboard, mobile app, and KYC‑compliant sales flow.
Key Responsibilities
Dev/Sec/Ops and Infrastructure
- Build, maintain, and secure CI/CD pipelines for staging and production environments using GitHub
- Implement infrastructure-as-code and secure configuration management
- Harden cloud environments (DigitalOcean and other providers) for scale, reliability, and security
- Manage SSL/TLS certificates, DNS, and Cloudflare configurations
- Migrate and secure infrastructure components, including SiteGround to DigitalOcean transitions
- Optimize deployment workflows to reduce downtime and improve release reliability
- Support secure architecture for SunCore’s web platform, dashboard, and mobile app (Flutter)
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Security Engineering
- Conduct regular penetration testing across applications, APIs, cloud infrastructure, and mobile components
- Perform threat modeling for new features, integrations, and system changes
- Monitor, identify, and remediate vulnerabilities using Dev/Sec/Ops best practices
- Implement access control policies, secrets management, and API security standards
- Lead incident response planning, tabletop exercises, and recovery strategies
- Build automated security checks into CI/CD pipelines
- Ensure SOC2‑level security readiness, including SHA‑256 secure login and audit preparation
API and Third-Party Integrations
- Secure and support integrations with: Binance, WhatToMine, Trulioo, Stripe, BitPay, Docusign, OKTA, Zendesk
- Ensure secure CRM migration and workflows, including HubSpot CRM, Zapier automations, and web‑to‑lead flows
- Support secure onboarding and identity verification workflows across the KYC‑compliant sales flow: Info → Product Overview → KYC → Payment → Contract → Secure Dashboard Access
Cross-Functional Collaboration
- Work with UI/UX and digital marketing agencies to ensure secure implementation of design and content
- Partner with engineering leadership to establish best practices for code reviews, documentation, testing, and security
- Collaborate with compliance and operations to ensure regulated‑environment readiness
Qualifications
Required
- 3–6 years in DevOps, Security Engineering, or DevSecOps
- Hands-on experience with CI/CD tools such as GitHub Actions or Jenkins
- Strong knowledge of cloud infrastructure, Docker, Linux, and networking
- Experience with Cloudflare, SSL/TLS, DNS, and IAM/SSO systems like OKTA
- Familiarity with Trulioo or similar KYC/identity verification tools
- Experience with penetration testing tools and methodologies
- Ability to perform threat modeling and security risk assessments
- Strong understanding of secrets management, access control, and API security
- Experience supporting secure API integrations across multiple third-party systems
- Excellent communication and documentation skills
- Ability to work independently in a fast-paced, async, global environment


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Preferred
- Certifications such as OSCP, CEH, Security+, AWS/GCP Certified Security Engineer
- Experience in fintech, blockchain, or regulated industries
- Background in digital identity verification or secure user onboarding
- Experience in scale-up or startup environments
- Familiarity with Flutter, Node.js, Python, and secure mobile app architecture
Compensation
- Negotiable based on location
- Deferred to completion of Demo
- Role transitions into a permanent hire thereafter
Why Join SunCore Digital
- High-impact role shaping the security foundation of a rapidly scaling digital company
- Fully remote team with async flexibility and optional collaboration in London or Bellevue
- Direct partnership with executive leadership and top-tier engineering, marketing, and design partners
- Competitive compensation with performance upside
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location