Sr. DevSecOps Engineer

2Base Technologies is a custom software development company with over 16 years of delivery experience. We work as an enterprise solutions partner for clients in the United Kingdom, the United States, India and other markets, building web and mobile applications and end-to-end digital solutions across industries.

We are adding a Senior DevSecOps Engineer to our DevSecOps team. You will strengthen our security posture, mature our pipelines and automation, and help the team build secure-by-design practice across everything we deliver. Depending on experience, this role can step into the lead position for the team or grow into it.

• Define, implement, and enforce security standards, policies, and best practices across cloud and on-prem environments.
  

• Conduct security risk assessments, perform vulnerability scans, coordinate penetration testing activities, and execute mitigation plans.
  

• Architect, maintain, and enhance secure CI/CD pipelines with automated compliance and governance checkpoints.
  

• Promote and uphold a strong “Security First” culture across engineering, ensuring secure design and development practices.
  

• Continuously monitor, detect, investigate, and respond to security threats, incidents, breaches, and anomalies.
  

• Develop, own, and mature automation practices: infrastructure provisioning using Terraform and configuration management using Ansible, alongside other automation frameworks.
  

• Design and maintain secure cloud architectures across AWS, Azure, or GCP to support scalable and compliant deployments.
  

• Build, operate, and secure containerized environments using Docker, with enforced security baselines. Kubernetes where applicable to the project.
  

• Implement and maintain secure monitoring, logging, and alerting systems for infrastructure and application layers, extending to SIEM as the practice develops.
  

• Improve and optimize system reliability, scalability, performance, and fault tolerance across all critical workloads.
  

• Mentor, guide, and upskill DevOps engineers in secure development, automation, and operational excellence.
  

• Lead technical strategy, decision-making, tool selection, process improvements, and DevSecOps roadmap execution.
  

• Work closely with PMO and engineering teams so that security, performance and delivery objectives stay aligned.
  

• Backup and disaster recovery: Backup policies, regular tested restoration, and disaster recovery plans with agreed recovery time and data loss targets, with restoration tested rather than assumed.
  

• Release management: Deployments across development, staging and production, including approvals, rollback procedures, and troubleshooting failed releases.
  

• Access and secrets management: Access reviews, joiner and leaver access, service accounts, credentials, secrets rotation, and encryption keys.
  

• Pipeline security: Code, dependency, container image, secrets and Infrastructure-as-Code scanning built into CI/CD, with clear ownership of who fixes what and by when.
  

• Incident management: Leading production incident response, coordinating updates to the people who need them, running root cause reviews, and tracking corrective actions to closure.
  

• Cloud cost management: Monitoring cloud spend, investigating unexpected cost, and improving resource sizing and utilisation without affecting reliability.
  

• Documentation: Infrastructure diagrams, configuration records, deployment guides, operational runbooks and recovery procedures, maintained as the environment changes.
  

• Reliability measurement: Defining and tracking service availability, deployment failure rate, recovery time, and how long vulnerabilities take to close.
  

• 6–10 years of experience in DevOps, Cloud, or Infrastructure engineering, including at least 4 years hands-on in DevOps, with strong security exposure.
  

• Strong hands-on expertise in AWS, with a focus on secure architecture. 
  

• Deep experience with at least one CI/CD platform, such as Jenkins, GitLab CI, GitHub Actions or Bitbucket Pipelines. Breadth across several is useful; depth in one is required.
  

• Experience securing and running Docker containers in production.
  

• Experience independently owning production infrastructure, releases and incident resolution, demonstrated through the work you have led.
  

• Strong understanding of networking technologies: LAN/WAN, firewalls, VPN, load balancers.
  

• Knowledge of security frameworks and standards (OWASP, NIST, CIS Benchmarks).
  

• Working depth in at least one monitoring and logging stack, such as Prometheus and Grafana, the ELK stack, or CloudWatch.
  

• Strong scripting skills (Python, Bash, Shell).
  

• Excellent troubleshooting, analytical, and problem-solving skills.
  

• Strong communication and collaboration skills with the ability to influence engineering teams.
  

These are the areas you will be working in. Core areas are assessed during the interview process. Additional areas strengthen an application, and support is available to develop them in the role.

AWS: Hands-on work across compute, storage, networking, access management and cost, based on environments you have configured.

CI/CD: Building and maintaining pipelines in Jenkins, GitLab CI, GitHub Actions or Bitbucket Pipelines, including the security checks within them. Depth in one platform is sufficient.

Git: Version control in practice: branching strategy, merge and release flow, repository access control, and keeping credentials out of version history.

Cloud server administration: Provisioning, sizing, lifecycle and cost of the servers behind the applications, in the cloud and on-premise where it applies.

Ubuntu: Ubuntu Server administration at an operational standard: packages, services, storage, networking, DNS, TLS and permissions.

Monitoring tools: Prometheus and Grafana, the ELK stack, CloudWatch or an equivalent, implemented by you, with judgement about alert severity. Depth in one stack is sufficient.

Server security: Hardening, patching, firewall and SSH configuration, least-privilege access, and closing known vulnerabilities to an agreed timeline.

Terraform: Infrastructure provisioning as code.

Ansible: Configuration management and automation.

Azure: Working depth in the equivalent services, and judgement about what belongs where when a client runs more than one platform.

GCP: Relevant where a client workload sits there.

Kubernetes: Running and securing orchestrated containers in production, where a project uses them.

SIEM and SOAR: Security event collection and response tooling. Prior experience is welcome; where you do not have it, this capability is developed in the role with support.

A degree or diploma in Computer Science, Information Technology or a related field. Equivalent practical experience is considered on the same terms.