Senior DevSecOps Engineer

Help build the future of fair hiring in the AI era.

At Arctic Shores, we're creating a world of work where potential matters more than experience.

Our market-leading, task-based psychometric assessments help organisations like Amazon, Siemens and Jet2 make fair, evidence-based hiring decisions. We've doubled ARR year-on-year for the past three years and are looking for a Senior Dev Sec Ops  Engineer to help secure and scale the next chapter.

This is a rare chance to provide technical guidance and leadership across our platform, and play a senior hands-on role in shaping our security posture of a purpose-driven scale-up where technical excellence is genuinely important.

You’ll be a hands-on practitioner sitting at the intersection of platform engineering and information security, working with an event-driven architecture running on Kubernetes and underpinned by AWS. You’ll be embedded within an engineering team that values excellence, aims high, and means it. On the engineering side, you'll own our AWS infrastructure, network and security boundaries, CI/CD security tooling, and platform controls.

On the information security side, you'll provide the technical expertise that underpins our ISO 27001 and Cyber Essentials certifications, incident response, and day-to-day governance.

If you've always wanted to work somewhere that treats security as a first-class concern rather than an afterthought, and where your work spans hands-on infrastructure and meaningful compliance contribution then this could be the role for you.

You might be a cloud or platform engineer who has grown into security. Or a security engineer who is genuinely hands-on with infrastructure. Either way, you'll thrive here if you:

• Have solid, hands-on AWS experience with a production estate. Comfortable with EKS, VPC, RDS, Lambda, S3, IAM, and Cloud Watch
• Use Terraform as your primary IaC tool and think in version-controlled, automated infrastructure
• Understand CI/CD security, embedding checks into pipelines, keeping tool chains current, and knowing what good looks like
• Have real ISO 27001 exposure, not just awareness, but active involvement: evidence gathering, policy maintenance, audit support
• Have worked through a Cyber Essentials or Cyber Essentials Plus certification cycle
• Are comfortable with SSO and identity management, including onboarding applications and supporting SAML integrations
• Are comfortable moving between deep technical work, and adapting to provide clear non-technical communication to stakeholders
• Are self-directed and able to manage competing priorities across engineering delivery and compliance obligations without constant direction
• Think about security as something you embed, not bolt on
• Are curious about applying AI and ensuring it adds value, by making security and platform knowledge available within our business, and ensuring the correct level of information is available to our customers.

If most of that resonates, even if your path has been unconventional, we'd love to hear from you.

Infrastructure & Dev Ops

• AWS (EKS, Lambda, RDS/Postgres, DynamoDB, SQS, Kinesis, S3, Cognito, Route
  53, VPC, EC2)
• Terraform, Kubernetes, Helm, Ansible, Puppet
• Git Lab CI

Observability & Security

• Prometheus, Grafana, Open Search, Cloud Watch
• Okta (SSO / IdP)
• Vulnerability management, secrets management, penetration test tooling

Application layer (context, not expectation)

• Scala, Kotlin, Type Script, Python, built by the engineering team; you’ll need to navigate the codebase, not own it

You don't need experience in every tool, but you should feel confident in modern cloud-native, infrastructure-as-code environments, and you should have genuine hands-on AWS depth.

• We believe in automation, with IaC, and version control at the heart of everything
• We run Kanban and focus on the smallest effort that delivers meaningful impact
• We favour simple, maintainable architectures over unnecessary complexity
• We practice TDD and maintain comprehensive automated test suites
• We follow functional programming principles
• We evolve our ways of working through team retrospectives

E…