DevSecOps Engineer

Who are LRQA?

LRQA stands for dedication to clients, market firsts, and deep expertise in risk management. We’ve grown to become a leading global assurance provider, bringing together outstanding expertise in certification, customised assurance, cybersecurity, inspection and training.

While we’re proud of our heritage, it’s who we are today that really matters, because that’s what shapes who we and our clients can become tomorrow. By staying true to our shared values and combining decades of collective experience, we support our clients in building a safer and more sustainable future.

LRQA currently operates across 50 countries, has more than 2,500 colleagues, generates £315m in revenue, and supports more than 60,000 clients across a diverse range of sectors and markets.

About LRQA Nettitude 

LRQA Nettitude is a leading provider of Cyber Security and Assurance, Incident Response, and Technology services to organizations worldwide. We are in an exciting growth phase, driven by the dynamic Cyber Security landscape. We're looking for passionate individuals eager to tackle the challenges of the evolving IT industry and emerging threats. Join us at the forefront of cyber security innovation and help shape the future. Learn more about LRQA Nettitude at nettitude.com.

Location

This role is hybrid based within the UK, with a mixture of Home and Office based working for collaboration, team building, workshops and clinic days.

We can support working from across the UK. All applicants will require residence in the UK.

Role Purpose

• Our team is looking for a highly motivated DevSecOps Engineer who can work both independently and collaboratively within the Managed Security Services Team.
• As a DevSecOps Engineer, you will play a vital role in developing automation and improving our workflow processes, enabling more efficient ways of working. Your responsibilities will include enhancing services, integrating innovative security technology, automating tasks and playbooks, and driving efficiencies across MSS.  
• You will sit within the Security Engineering Team and will work closely with Security Analysts and Engineers. We are a high-trust, close-knit, and award-winning team.  So, the passion and drive to get involved, make a difference and contribute to both our security mission and that of our customers is essential.
• Whilst working closely with other Internal and Vendor Security Engineers, you will represent LRQA Nettitude’s excellent professional standards to clients. You will possess prior work experience in a rapidly expanding organisation that caters to multiple clients.
• Our goal is to establish LRQA Nettitude as a leading global provider of managed security and support services. This position is key to achieving this aim.

Responsibilities

• Act as a point of contact and own technical projects
• Develop and implement continuous service improvements
• Develop secure code that meets a high level of industry standards.
• Develop new platforms and services for the SOC technology stack to ensure the SOC remains at the cutting edge of Security Operations.
• Design, configure, and deliver technical solutions to the highest security standards
• Keep up to date with the latest security and technology developments
• Maintain an awareness of the latest Defensive Monitoring technologies and trends
• Develop and integrate technical solutions that improve the operational capability of the Engineering team and support the work of the wider SOC team

Requirements:

The following are recommendations for the role. Please still apply if you only have experience in some of the points below:-

• Demonstrably strong programming and scripting skills, preferably in Python & PowerShell
• Experience working with vendor API libraries.
• Minimum of 3 years experience delivering DevSecOps projects
• Experience in a customer-facing role; communicating to different levels of stakeholders
• Ability to work independently and as part of a team.
• Experience in Agile ways of working, tools and techniques
• Experience using source code and artefact repositories (eg. Github, Git)
• Secure coding practices knowledge
• Knowledge of Penetration and vulnerability testing tools and techniques
• Demonstrable skills in SIEM & EDR
• Experience of producing high quality and informative documentation

Desirable:

• Front-end web developer skills (HTML, CSS, Javascript, MongoDB and associated libraries)
• Experience with the Elastic stack (Elastic Search Engineer)
• Experience working with SQL and other backend database technologies
• Experience with ITSM tooling and workflows
• A wide understanding of IT infrastructure including Windows and Linux applications as well as network and other security vendor products.
• Experience working in a multi-client solutions provider #LI-Nettitude #LI~Nettitude