DevSecOps Engineer

THE NEXT CHAPTER STARTS WITH YOU DevSecOps Engineer Embed security, automation and resilience into the technology powering the next chapter of Vanquis

We've invested in modernising our technology landscape. The opportunity now is to strengthen how security is integrated across development and operations, helping teams deliver reliable change with confidence.

As a DevSecOps Engineer, you'll build secure Infrastructure as Code, contribute to CI/CD design, integrate security tooling and automated controls, and improve monitoring and incident response. You'll work across technical disciplines to protect software, data and customer outcomes while improving delivery performance and cost-effectiveness.

There's More to the Story

This role is part of a wider Technology & Change transformation, strengthening engineering foundations and building capabilities that can deliver value safely and sustainably.

How you'll make an impact

• Integrate security controls and tooling into CI/CD pipelines, automated testing and deployment processes

  Vulnerabilities are identified earlier and software can move through delivery with stronger security assurance.

• Develop secure, scalable Infrastructure as Code and automation using tools such as Terraform or CloudFormation

  Infrastructure is provisioned consistently, efficiently and with security, reliability and cost in mind.

• Implement monitoring, logging and alerting across development, test and production environments

  Teams can identify issues quickly, respond proactively and reduce customer or operational impact.

• Carry out vulnerability assessments and help define proportionate risk-mitigation actions

  Security risks are understood, prioritised and addressed before they become incidents.

• Support security incident response and troubleshoot complex infrastructure and deployment issues

  Incidents are contained and resolved quickly, with clear learning fed back into engineering practices.

• Collaborate with Product, Engineering, Technology & Change peers and third-party partners

  Security becomes a shared responsibility and continuous improvement is embedded across delivery.

Why this role matters

Security must be built into modern software delivery. This role helps teams find vulnerabilities earlier, automate repeatable controls, improve service reliability and respond quickly when incidents occur. The result is safer change, stronger protection for critical assets and clearer compliance evidence.

Our DevSecOps approach

• Secure by design

  Security controls are built into delivery rather than added at the end.

• Automation first

  Repeatable work is automated to improve speed, consistency and control.

• Everything as code

  Infrastructure and configuration are versioned, reviewable and reproducible.

• Observable services

  Monitoring, logging and alerting support early detection and faster recovery.

• Shared ownership

  Engineering, product, operations and security work together to manage risk.

Technology stack

• Terraform and CloudFormation

  Security scanning and vulnerability assessment

• Python and automation scripting

  Access control, authentication and encryption

• Jenkins, Travis CI, CircleCI and Git

  Monitoring, logging and alerting

• AWS, Azure and GCP

  Incident response and risk mitigation

• Docker and container technologies

  Secure configuration and continuity planning

Essential experience

• Hands-on experience with Infrastructure as Code, ideally Terraform or CloudFormation, and automation scripting in a language such as Python.
• Practical knowledge of CI/CD tooling, Git-based version control and secure software delivery practices.
• Experience with cloud platforms such as AWS, Azure or GCP and container technologies such as Docker.
• Experience with security scanning, vulnerability assessment, monitoring, logging and incident response.
• Strong understanding of security principles, including encryption, access controls, authentication and infrastructure security.
• Strong analytical and problem-solving skills, with the ability to diagnose complex infrastructure, deployment and security issues.
• Confident collaboration across engineering, product, operations, security and third-party teams.

Useful, but not essential

• Experience with orchestration technologies and modern cloud-native delivery patterns.
• Knowledge of SRE principles, service reliability, capacity management and continuity planning.
• Experience working in financial services or another regulated technology environment.
• Relevant cloud, security, DevOps or infrastructure certification.
• Degree, equivalent professional qualification or substantial relevant work experience.

Career development

You will have opportunities to deepen your expertise across cloud security, automation, Infrastructure as Code and SRE practices, contribute to tooling decisions, lead improvement activity and provide guidance to junior DevSecOps engineers.

Why Vanquis?

• Award-winning employer

  LinkedIn Learning

• Flexible working

  Two volunteering days

• Inclusive culture

  Enhanced family leave

• Up to 10% pension contribution

  Paid birthday leave

• 25-30 days annual leave

  Career development opportunities

Ready to shape what's next?

If you're looking for an opportunity to combine cloud engineering, automation and security while helping shape modern technology delivery at Vanquis, we'd love to hear from you.

Recruitment agency information

Our Talent Acquisition team manages all recruitment activity directly. We work with approved recruitment partners where additional support is required.

Unsolicited CVs submitted without prior agreement from Vanquis Talent Acquisition will be considered direct applications and no agency fees will be payable.

The Next Chapter Starts with You.