PlexTrac
Senior DevSecOps Engineer (UK&I)
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
About PlexTrac
PlexTrac is a cybersecurity agency company helping security teams automate red teaming, pentest reporting, exposure management, and remediation workflows. Our platform is used by penetration testers, red teams, consultants, enterprises, and managed security providers to operationalize security findings and improve collaboration across technical and executive stakeholders.
We are a remote-first company headquartered in the United States with distributed team members across North America, Europe, and Asia. We are committed to ownership, transparency, practical problem-solving, and building products that customers genuinely rely on.
Why This Role Matters
We’re looking for a Senior DevSecOps Engineer (UK&I) as we scale our platform and infrastructure to lead the charge on security and reliability at the system level. This role will work closely with engineering, product, and leadership to architect and implement systems that are resilient, secure, and scalable from day one. You'll be responsible for owning infrastructure, security, and reliability end-to-end, helping to shape the technical strategy.
This is a high-impact, hands-on role for a senior engineer who thrives in a small, fast-paced team environment. Are you up for the challenge? Apply today!
Location: Remote — UK&I only.
Key Responsibilities
- Cloud & Infrastructure Security - Write and maintain Infrastructure as Code (IaC) with secure defaults, ensuring least privilege access and robust cloud configurations.
- Vulnerability Management - Hunt for weaknesses, perform threat modeling, prioritize remediation, and guide engineering teams on how to fix discovered flaws.
- Incident Response & Monitoring - Monitor live systems, investigate security anomalies, and respond to breaches.
- Develop, deploy, and maintain Infrastructure-as-Code (IaC) in a GCP cloud-based environment
- Lead the development and enforcement of security architecture and operational best practices
- Establish monitoring, alerting, and incident response strategies across environments
- Define and execute on security roadmaps (e.g., threat modeling, vulnerability scanning, IAM policies)
- Partner with developers to shift security and reliability left into the SDLC
- Support compliance and audit initiatives (SOC2, ISO27001)
- Develop and maintain automated CI/CD pipelines for DBs, Servers, containers, and applications using DevSecOps tools to include Terraform, Ansible, GitHub, ArgoCD
- Develop integration interfaces using Python, Bash, and Go
- Deploy and maintain complex modern cloud architectures
- Create automated testing plans for infrastructure and applications
- Create and update technical documentation (e.g., user guides, infrastructure diagrams)
- Work across infrastructure that contains both Linux and Windows
- Work and communicate effectively in a group environment with technical and non-technical, management, and customer both written and verbally
- Utilize robust troubleshooting skills
- Instill and apply solid engineering rigor, to include configuration management, testing
- Develop/engineer as part of an Agile team
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Qualifications
- 5+ years of experience in DevOps, SRE, or DevSecOps roles, with increasing leadership or ownership
- Deep knowledge of cloud infrastructure, with a focus on security, scalability, and cost-efficiency
- Strong experience with infrastructure-as-code (Terraform, Ansible)
- Fluency in CI/CD automation (GitHub Actions, ArgoCD, etc.)
- Strong understanding of security fundamentals: identity and access management, secrets management, encryption, container security, etc.
- Familiarity with compliance frameworks like SOC2 or ISO27001
- Comfortable writing code and automation scripts (e.g., Python, Bash, Go)
- A strategic mindset paired with startup scrappiness—you can zoom out and drive systems-level thinking, and also dive in and ship
- Experience with Kubernetes, service mesh (e.g., Istio), and zero-trust architecture
- History of leading incident response or large-scale reliability improvements
- Strong communication skills across engineering and non-technical stakeholders
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Tools & Technical Environment
Cloud environment running VMs with docker containers, GKE clusters, and managed services, with an ongoing initiative to modernize the infrastructure further. IaC using Terraform, GitHub, Ansible, and ArgoCD. Support for customer hosted installations involving various configurations.
Work Style
We operate as a remote-first, distributed team with a strong asynchronous culture. We value thoughtful communication, autonomy, and collaboration, with core working hours that partially overlap with U.S. Eastern Time.
Employees are administered through our EOR partner: Remote.
We’re committed to building an inclusive workplace where people from all backgrounds can thrive. We welcome applicants regardless of race, ethnicity, religion, gender identity, sexual orientation, age, disability, or background.
If you require accommodations during the interview process, please let us know: HR@plextrac.com
#LI-Remote
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills