Security Software Engineer

Glasgow, G , G511DA

| London, G , W1A 1AA

| Newcastle-upon-Tyne, G , NE991RN

| Salford, G , M50 2QH

JOB BAND: C
CONTRACT TYPE:
Permanent, Full-time
DEPARTMENT:
Dev Sec Ops

LOCATION:

London, Salford, Glasgow or Newcastle - Hybrid
PROPOSED SALARY RANGE: up to £57,500 depending on relevant skills, knowledge and experience. The expected salary range for this role reflects internal benchmarking and external market insights.

We're happy to discuss flexible working. If you'd like to, please indicate your preference in the application – though there's no obligation to do so now. Flexible working will be part of the discussion at offer stage.

Join BBC Media Tech Dev Ops team as a Dev Sec Ops  Engineer. You'll help build, operate and improve the software, platforms and automation that support secure software delivery across Media Technology. The role spans software engineering, cloud infrastructure, security tooling, CI/CD, vulnerability management and engineering automation. You'll work on practical engineering problems alongside experienced engineers and engineering teams. The role is intended to give you exposure to different parts of Dev Sec Ops  and security engineering rather than specialising in a single platform or security discipline.

WHY JOIN THE TEAM

You'll work on practical engineering problems alongside experienced engineers and engineering teams. You'll be expected to independently deliver well-scoped pieces of work, while working with senior engineers on larger or more complex technical changes. The role is intended to give you exposure to different parts of Dev Sec Ops  and security engineering rather than specialising in a single platform or security discipline.

YOUR KEY RESPONSIBILITIES AND IMPACT

• Build integrations that connect security, engineering and organisational data to make findings easier for teams to understand and act on. Build, maintain and improve backend services, integrations, automation and internal engineering tools.
• Work with AWS infrastructure and Infrastructure as Code to deliver and operate secure cloud-based services. Help integrate security checks and controls into CI/CD workflows, including dependency scanning, code scanning, secrets detection and container or infrastructure security tooling.
• Apply secure engineering practices around identity and access management, secrets, logging, monitoring, data handling and least-privilege access. Help operate and improve security and vulnerability-management platforms used by engineering teams.
• Investigate technical issues across services, integrations, cloud infrastructure and security platforms, and implement appropriate fixes. Write automated tests, documentation and operational tooling to support reliable production services.
• Deliver well-defined engineering changes independently, from implementation through testing and deployment. Work with senior engineers on larger pieces of work, contributing to technical design, estimation and implementation.
• Work with engineering teams to understand security or operational problems and help implement practical solutions. Contribute reusable code, patterns, documentation and automation where these can help other teams.
• Use AI-assisted engineering tools where they provide useful support for coding, testing, investigation, automation or security analysis.

ESSENTIAL

• Software Engineering & Delivery
  -Experience building, maintaining and operating software services, integrations, automation, or engineering tooling, using at least one modern programming language.
• Cloud & Platform Engineering
  -Experience working with cloud infrastructure (preferably AWS), including Infrastructure as Code, automated software delivery, and CI/CD practices.
• Security & Operational Awareness
  -Understanding of secure engineering principles, including APIs, authentication, access control, secrets management, monitoring, and software security best practices.
• Problem Solving & Technical Ownership
  -Ability to investigate technical issues, understand unfamiliar systems, and deliver practical engineering solutions with minimal day-to-day supervision.
• Engineering Collaboration
  -Experience using source control and automated testing, with the ability to clearly communicate technical challenges, solutions, and implementation decisions within an engineering team, alongside a strong interest in Dev Sec Ops  and security engineering.

DESIRABLE

• Application & Cloud Security Tooling
  -Experience with vulnerability…