DevSecOps Engineer
Location: London, hybrid (1–2 days per week in the office)
Salary range: £75,000–£84,000 + benefits
Tech: AWS (EC2, Lambda, RDS, Route53, ELBs, EKS), Terraform, Kubernetes, Docker, CI/CD (Jenkins, GitHub Actions, CodePipeline), Python/Bash, Ansible, Security frameworks (CIS, OWASP),
** Sponsorship and offshore remote are not available for this position**
Immersum continue to support one of the leading media businesses in the UK. They own and run a portfolio of household name publications and consumer brands with an audience of millions across digital, print, video, podcasts, apps and live events.
They are now seeking a DevSecOps Engineer to join their growing Platforms & Security team, working at scale on modernising cloud infrastructure and embedding security across their software delivery lifecycle.
The Company:
This fast-growing, multi-platform media business delivers innovative content, world-class digital products and services as well as live events. With close to 100 million people reached monthly and multiple UK offices, they have been voted one of the UK’s best media companies to work for, consistently recognised for their commitment to people, culture and sustainability.
The Role:
You’ll join a highly experienced engineering team and play a key role in ensuring platforms, products and infrastructure remain secure, resilient and scalable. This is a hands-on role where you’ll combine DevOps best practices with modern security engineering, working closely with developers, QA and product teams to protect customer data and drive platform innovation.
Key responsibilities include:
* Designing and maintaining secure, scalable AWS infrastructure with Terraform, Kubernetes and Docker.
* Embedding security into CI/CD pipelines (Jenkins, GitHub Actions, CodePipeline) through SAST/DAST and dependency scanning.
* Collaborating with developers and product teams to promote DevSecOps practices, threat modelling and secure coding.
* Conducting security assessments, monitoring for vulnerabilities and leading remediation efforts.
* Operating and extending monitoring, logging and alerting systems for both performance and security.
* Managing DNS, CDN, caching, firewalls, load balancers and WAFs for secure web delivery.
* Responding to incidents and driving continuous improvement of platform security.
Tech Stack:
* Cloud: AWS (EC2, Lambda, RDS, Route53, ELBs, EKS), plus some GCP/Azure exposure
* Infrastructure as Code: Terraform, Ansible
* Containers & Orchestration: Kubernetes, Docker
* CI/CD: Jenkins, GitHub Actions, AWS CodePipeline
* Monitoring: Prometheus, Grafana, ELK, CloudWatch
* Security: CIS, OWASP frameworks, SAST/DAST tools, dependency scanning
* Web & Systems: LAMP stack (Varnish, Nginx, Apache), MySQL/Postgres, MongoDB
* Networking & Security: SSL/TLS, TCP/IP, Firewalls, WAFs, DNS, Load Balancers
If you’re passionate about combining DevOps with security to solve large-scale cloud challenges, this role offers the opportunity to work in a major media enterprise serving millions of customers monthly, whilst embedding security practices into a truly modern cloud-first environment.
Click apply to learn more.