DevSecOps Engineer
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
Hoxton Wealth seeks a mid-level DevSecOps Engineer to embed security into AWS-based development workflows and CI/CD pipelines, while also managing IT security for Office 365. The role requires strong hands-on experience with AWS security, SIEM tools, and ISO 27001 compliance in a financial services environment.
Key Skills for This Role
Responsibilities
- Design, implement, and operate DevSecOps practices across AWS based development and production environments, aligned with ISO 27001 control objectives.
- Embed security controls into CI/CD pipelines, including static analysis, dependency scanning, container scanning, and policy enforcement.
- Own and operate security tooling such as SonarQube, Microsoft Sentinel, and related vulnerability, monitoring, and detection platforms.
- Implement and maintain AWS security controls, including IAM, network segmentation, logging, encryption, and threat detection.
- Manage identity and access security across AWS and Microsoft 365, including role design, conditional access, MFA, and periodic access reviews.
- Monitor, investigate, and respond to security alerts and incidents.
- Partner with engineering teams to define secure architecture patterns and ensure infrastructure as code adheres to approved security baselines.
- Support secure software development by defining secure coding standards and working with teams to remediate findings.
- Own vulnerability management activities, including scanning, prioritisation, remediation tracking, and risk acceptance.
- Maintain security documentation, runbooks, and evidence required for ISO 27001 audits and internal reviews.
- Support internal and external audits by providing evidence, implementing corrective actions, and tracking control effectiveness.
- Continuously improve security automation, detection coverage, and operational resilience.
Requirements
- 3–6 years of experience in DevSecOps, cloud security, or platform security roles.
- Strong hands on experience securing AWS environments, including IAM, VPCs, CloudTrail, GuardDuty, Security Hub, and encryption services.
- Proven experience integrating security tooling into CI/CD pipelines, including SonarQube for static analysis and code quality enforcement.
- Hands on experience with SIEM and security monitoring tools, including Microsoft Sentinel or equivalent platforms.
- Experience with container, dependency, and secrets security tooling.
- Strong understanding of secure software development lifecycle (SSDLC) principles and shift left security practices.
- Experience securing Microsoft 365 environments, including Entra ID (Azure AD), Conditional Access, Defender, and email security.
- Familiarity with ISO 27001 concepts, including risk management, control implementation, evidence collection, and audit support.
- Experience working in regulated environments such as financial services, fintech, or similar industries.
- Strong analytical and problem solving skills, with the ability to balance security risk, usability, and delivery speed.
- Clear written and verbal communication skills, with the ability to collaborate effectively with engineering, IT, and compliance teams.
Full Job Posting
Position Overview
- Hoxton Wealth is a global financial services firm with offices in key locations worldwide.
- We are seeking a DevSecOps Engineer to embed security into our cloud native development workflows and corporate IT environment.
- This role is suited to a mid level engineer with strong hands on experience securing AWS based development platforms and integrating security controls into CI/CD pipelines.
- You will play a key role in shifting security left across the software delivery lifecycle while ensuring production and corporate systems remain secure, observable, and compliant with ISO 27001.
Responsibilities
- Design, implement, and operate DevSecOps practices across AWS based development and production environments, aligned with ISO 27001 control objectives.
- Embed security controls into CI/CD pipelines, including static analysis, dependency scanning, container scanning, and policy enforcement.
- Own and operate security tooling such as SonarQube, Microsoft Sentinel, and related vulnerability, monitoring, and detection platforms.
- Implement and maintain AWS security controls, including IAM, network segmentation, logging, encryption, and threat detection.
- Manage identity and access security across AWS and Microsoft 365, including role design, conditional access, MFA, and periodic access reviews.
- Monitor, investigate, and respond to security alerts and incidents.
- Partner with engineering teams to define secure architecture patterns and ensure infrastructure as code adheres to approved security baselines.
- Support secure software development by defining secure coding standards and working with teams to remediate findings.
- Own vulnerability management activities, including scanning, prioritisation, remediation tracking, and risk acceptance.
- Maintain security documentation, runbooks, and evidence required for ISO 27001 audits and internal reviews.
- Support internal and external audits by providing evidence, implementing corrective actions, and tracking control effectiveness.
- Continuously improve security automation, detection coverage, and operational resilience.
Requirements
- 3–6 years of experience in DevSecOps, cloud security, or platform security roles.
- Strong hands on experience securing AWS environments, including IAM, VPCs, CloudTrail, GuardDuty, Security Hub, and encryption services.
- Proven experience integrating security tooling into CI/CD pipelines, including SonarQube for static analysis and code quality enforcement.
- Hands on experience with SIEM and security monitoring tools, including Microsoft Sentinel or equivalent platforms.
- Experience with container, dependency, and secrets security tooling.
- Strong understanding of secure software development lifecycle (SSDLC) principles and shift left security practices.
- Experience securing Microsoft 365 environments, including Entra ID (Azure AD), Conditional Access, Defender, and email security.
- Familiarity with ISO 27001 concepts, including risk management, control implementation, evidence collection, and audit support.
- Experience working in regulated environments such as financial services, fintech, or similar industries.
- Strong analytical and problem solving skills, with the ability to balance security risk, usability, and delivery speed.
- Clear written and verbal communication skills, with the ability to collaborate effectively with engineering, IT, and compliance teams.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at Hoxton Wealth
Tax Senior
Dubai, UAE
Hoxton Tax is looking for a Tax Senior to join its Private Client Tax team, assisting with UK personal tax compliance and advisory for high-net-worth individuals and internationally mobile clients. The role is ideal for
Tax Junior
Dubai, UAE
Hoxton Tax is looking for a Tax Junior to join their Private Client Tax team. The role involves supporting UK personal tax compliance, preparing tax returns, and assisting with tax research. Ideal for early-career candid
Performance Marketing Manager
Dubai, UAE
Hoxton Wealth seeks a data-driven Performance Marketing Manager to lead paid media acquisition across Google Ads, Meta, LinkedIn, and app-store campaigns. The role involves managing multi-market budgets, optimizing campa
Tax Senior
Dubai, UAE
Hoxton Tax is looking for a Tax Senior to join their Private Client Tax team, working with high-net-worth individuals and internationally mobile clients. The role involves preparing UK personal tax returns, assisting wit
Tax Junior
Dubai, UAE
Hoxton Tax is looking for a Tax Junior to join their Private Client Tax team in Dubai. The role involves supporting compliance work, preparing UK personal tax returns, and assisting with tax research. Ideal for early-car
Performance Marketing Manager
Dubai, UAE
Hoxton Wealth is hiring a Performance Marketing Manager to lead paid media acquisition across Google, Meta, LinkedIn, and mobile channels in Dubai. The role involves managing multi-market budgets, optimizing campaigns, a
Performance Marketing Manager
Dubai, UAE
Hoxton Wealth is looking for a data-driven Performance Marketing Manager to lead paid media acquisition across Google, Meta, LinkedIn, and mobile channels. Based in Dubai, this role involves managing multi-market budgets
Senior Executive Assistant
Dubai, UAE
Seeking a highly organized Executive Assistant to manage a complex diary, provide administrative support, and facilitate business growth across international markets.
Tax Senior
Dubai, UAE
Tax Junior
Dubai, UAE
Performance Marketing Manager
Dubai, UAE
Tax Senior
Dubai, UAE
Tax Junior
Dubai, UAE
Performance Marketing Manager
Dubai, UAE
Performance Marketing Manager
Dubai, UAE
Senior Executive Assistant
Dubai, UAE