DevSecOps Engineer

Home. There's no place like it.

And there's no feeling like helping people create the joy of feeling truly  Dunelm, that's what we do. We're the UK's number one choice for homewares because we make home life lovelier for our customers. And we've crafted a workplace that feels just as welcoming - where you can bring your ideas, be yourself, and feel right at home.

We're a hybrid business, which means you'll have flexibility alongside time together with your team. In this role, you can expect a minimum of 1 day per week in our Leicester Office helping you stay connected, collaborate and do your best work for our customers.

The Dev Sec Ops  team helps make sure Dunelm's technology is secure, reliable and easy for our engineering teams to use. We work across the business, partnering with product and engineering teams to build security into the software development process, improve our cloud platforms, automate controls, and remove friction so teams can deliver great products safely and quickly.

We're a team that believes security works best when it's an enabler, not a blocker and automation is the key. Whether we're creating guardrails in AWS, expanding our use of Google Cloud, improving till security, or helping teams solve security challenges from a range of technologies, our focus is on making the right thing the easy thing.

Once you've settled in, you will join the 24x7 on call rota to respond to any security incidents.

This role requires hands-on experience across cloud security, CI/CD pipelines, infrastructure as code, vulnerability management. No two days are the same, as the technical security team, Dev Sec Ops  covers all areas of the business advising on security outcomes, for example; tills and self-checkout.

• Design, implement and improve Dev Sec Ops  controls throughout the Software Delivery Lifecycle.
• Integrate security tooling into CI/CD pipelines.
• Secure and govern multi-cloud environments across AWS and GCP.
• Develop cloud security baselines, guardrails, and best practices.
• Implement and maintain CSPM/CNAPP controls.
• Ensure cloud deployments comply with security standards and policies.
• Support threat modelling and security architecture reviews for cloud-native solutions.
• Assist with security investigations and incident response activities.
• Support detection engineering initiatives.

We're looking for someone who's passionate about building secure, scalable technology and enjoys working with others to solve complex problems. You'll be at your best in this role if you're curious, collaborative and keen to keep learning.

You'll be a great fit if you have experience with:

• Working in Dev Ops, Cloud Security, Platform Engineering, or Dev Sec Ops  roles.
• Cloud platforms, particularly AWS.
• Applying security principles within modern software development and cloud environments.
• Infrastructure as Code and automation tools such as Terraform, CDK or Cloud Formation
• CI/CD pipelines and Dev Ops practices.
• Identifying, investigating and remediating security risks and vulnerabilities.
• Working closely with engineering teams to embed security into the development lifecycle.
• Python coding
• Have a collaborative mindset and can build positive relationships with technical and non-technical colleagues.
• Are naturally curious and enjoy learning new technologies, tools and ways of working.
• Take ownership of problems and see them through to a successful outcome.
• Can balance security, risk and business needs to make sensible, pragmatic decisions.
• Enjoy sharing knowledge and helping others grow.

It would be a bonus if you have experience with:

• Google Cloud Platform (GCP).
• Cloud security in a large-scale environment.
• Security testing, threat modelling or…