DevSecOps Engineer

DevSecOps Engineer (up to £84,000)

Immediate is home to some of the biggest and most loved consumer brands in the UK, including Radio Times, Good Food and BBC Gardeners World magazine. Our trusted, quality content reaches millions of people a month across digital, print, video, podcasts, apps and live events.

We’re the destination for people looking to get more from the things they love. We’re here to inspire, fuel, encourage and educate

Whether it’s the big things, or the little things; from reaching fitness goals to savouring good food, cultivating outdoor spaces, or enjoying the latest TV sensation – we help bring our audiences joy!

About the role

We are seeking a DevSecOps Engineer to join our growing Platforms & Security team. This is a hands-on role for someone passionate about automation, cloud operations, and security by design. You’ll be responsible for ensuring our platforms, products, and infrastructure are secure, resilient, and scalable while working closely with developers, QA, and product teams.

You’ll combine DevOps best practices with modern security engineering approaches to embed security throughout the software delivery lifecycle, strengthen our cloud infrastructure, and proactively protect our customers’ data.

As a DevSecOps Engineer you will;

• Design, build, and maintain secure and scalable infrastructure in AWS using Terraform, Kubernetes, and Docker.
• Embed security into the CI/CD pipeline (Jenkins, GitHub Actions, CodePipeline) including SAST/DAST and dependency scanning.
• Collaborate with developers and product teams to promote DevSecOps practices, threat modelling, and secure coding standards.
• Conduct security assessments of applications, services, and infrastructure, identifying vulnerabilities and recommending remediation.
• Operate, tune, and extend monitoring, logging, and alerting systems for both performance and security.
• Manage DNS, CDN, caching, firewalls, load balancers, and WAFs to ensure secure and performant web delivery.
• Respond to and resolve security incidents and platform issues, driving continuous improvement and automation of responses.
• Keep documentation current, including runbooks, incident playbooks, and security procedures.
• Stay ahead of industry trends, emerging threats, and new DevSecOps tools.