Saragossa
Security Engineer
Get notified of more jobs like this · No spam, ever
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Security Engineer (DevSecOps) - Contract - Mostly remote - Inside IR35 - 6 months rolling
My client within the financial services space are looking for a Security Engineer to join their team and help embed security throughout the software development lifecycle.
This is a hands-on DevSecOps-focused role, working closely with engineering and development teams to improve the security of our cloud infrastructure, developer tooling and CI/CD pipelines.
You’ll help build security into the way software is developed and deployed, while identifying and managing vulnerabilities across our technology stack.
What you’ll be doing
- Integrating security controls and tooling into CI/CD pipelines, helping engineering teams identify and address security issues early in the development lifecycle.
- Securing and improving developer tooling and workflows, ensuring security is built into the development experience.
- Managing and improving dependency vulnerability management, including identifying, prioritising and remediating vulnerabilities in third-party libraries and packages.
- Supporting container security and vulnerability management, from image scanning through to remediation and secure deployment.
- Working with engineering teams to establish practical, scalable security controls across the software development lifecycle.
- Helping secure and monitor our AWS cloud environment.
- Applying security best practices to infrastructure managed through Terraform.
- Working with GitHub and associated development workflows to improve code and repository security.
- Supporting vulnerability identification, risk assessment and remediation across our development and cloud environments.
- Continuously evaluating security tooling and processes, looking for ways to automate security and reduce friction for development teams.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
You will be someone with a strong understanding of application, cloud and infrastructure security, combined with practical DevSecOps experience.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
You’ll ideally have experience with:
- AWS security and cloud environments.
- GitHub and modern software development workflows.
- Terraform and Infrastructure as Code security.
- Integrating security tools into CI/CD pipelines.
- Dependency and open-source vulnerability management.
- Container security and vulnerability scanning.
- Working with developers and engineering teams to implement security controls.
- Security automation and embedding security into the software development lifecycle.
You don’t need to have experience with every technology or tool we use. What matters most is a strong security engineering mindset, good technical fundamentals and the ability to work collaboratively with developers to solve security problems in a practical way.
If this sounds like one for you please reply with your up to date CV and I will give you a call to discuss in more detail.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Location