DevSecOps Engineering Manager

DevSecOps Engineering Manager

Location: Remote (UK)

What you’ll be doing:

• Line Management: Direct line management of the DevSecOps engineering team, providing mentorship and guidance to both junior and senior engineers.
• Global Community Leadership: Champion and grow the DevSecOps community on a global scale, promoting best practices and knowledge sharing.
• Security Integration: Architect and implement security best practices within DevOps workflows, ensuring security is embedded throughout the software development lifecycle (SDLC).
• CI/CD Platform Support: Oversee and support CI/CD platforms, driving automation and efficiency in build, deployment, and monitoring processes.
• Cloud Security: Contribute to security assessments, audits, and threat modelling exercises for AWS & Azure environments, embedding security best practices into DevOps workflows and ensuring alignment with industry standards and regulatory requirements.
• Collaboration: Work closely with cross‑functional teams—including business stakeholders, infrastructure & operations, architecture, service delivery, external partners, and product teams—to identify vulnerabilities and develop remediation strategies.
• Incident Response: Manage security incidents, conduct root cause analysis, and implement preventive measures.
• Continuous Improvement: Evaluate and adopt new technologies and tools to enhance security posture and incident response capabilities.
• Mentorship & Education: Educate teams on security principles, tools, and practices, instilling a security‑first mindset across the organisation.

About you

You’re a seasoned engineering leader who thrives at the intersection of security, cloud, and DevOps. You’re passionate about building high‑performing teams, elevating engineering standards, and embedding security into every stage of the development lifecycle. You enjoy working in complex, global environments and are comfortable influencing at all levels — from engineers to senior stakeholders.

You bring a blend of strategic thinking and hands‑on technical depth, and you’re energised by solving complex problems, driving cultural change, and continuously improving how teams build, deploy, and secure software.

What you’ll need

• Strong background in DevSecOps, DevOps, or related engineering fields, with proven experience integrating security into CI/CD pipelines.
• Demonstrated success managing and scaling high‑performing engineering teams.
• Deep expertise in cloud security, particularly across AWS and Azure.
• Strong understanding of security frameworks and compliance standards (e.g., NIST, ISO 27001, PCI‑DSS).
• Hands‑on experience with security automation tools (SAST, DAST, IAST, RASP), container security, and orchestration platforms.
• Familiarity with programming and scripting languages such as Python, Java, Go, Bash, or Shell.
• Experience with modern cloud architectures, containerisation (AWS ECS/Fargate, Nomad, Docker), and API gateways (AWS API Gateway, Kong).
• Experience with modern PaaS vendors such as MuleSoft, Adobe e-Commerce, SAP RISE.
• Proficiency with build tools (Maven, Jenkins, Kubernetes), cloud monitoring solutions (Datadog, Grafana, CloudWatch, New Relic), and IaC tools (Terraform, CloudFormation).
• Strong understanding of service‑oriented design, high availability, fault tolerance, and 12‑Factor principles.
• Experience with Git and test automation frameworks.

Soft Skills

• Excellent communication and influencing skills, with the ability to drive alignment across diverse, cross‑functional teams.
• A collaborative, teaching‑oriented mindset with a passion for developing others.
• Strong analytical thinking, with the ability to assess efficiency, quality, and cost‑effectiveness across cloud operations.
• Skilled at identifying risks, removing blockers, and navigating complex organisational structures.
• Comfortable working across multiple silos and translating ambiguity into clear, actionable plans.

Technical Skills

• Strong understanding of containerisation platforms and API gateways (AWS ECS/Fargate, Nomad, Docker, Kong).
• Experience with logging and monitoring tools such as Datadog, Grafana, CloudWatch, and New Relic.
• Familiarity with AWS & Azure automation, CI/CD concepts, and test automation.
• Experience with a broad range of AWS & Azure services.
• Proficiency in scripting languages such as Terraform, CloudFormation, Python, Bash, Shell, or NodeJS.
• Strong understanding of CI/CD pipelines and 12‑Factor app principles.

The extras you’ll get:

• Help for people to take control of ongoing Health conditions such as diabetes or asthma with £500 a year available for monitoring & consultation.
• Support for Neurodiverse colleagues and families with neurodiverse members with needs assessment, diagnosis and post diagnostic support for autism spectrum, ADHD and Tourette’s syndrome.
• Support for Women at different life stages from streamlined fertility support through to diagnosis and monitoring of both endometriosis and menopause.
• Helping our LGBTQ+ community through enhanced coverage for trans colleagues, including voice coaching, facial surgery, and gender confirmation surgery.
• Additions to Fertility coverage including IVF for lesbian couples and information/support around surrogacy and adoption for all.