Junior DevSecOps Engineer

Junior DevSecOps Engineer Role Overview

This role reports into the Engineering Manager and sits at the intersection of software development, infrastructure operations, and security. The successful candidate will support and enhance application security, infrastructure resilience, and secure development practices while working collaboratively within a technical team.

The role is suited to a proactive individual who is comfortable taking ownership of assigned initiatives, contributing to secure systems design, and translating technical requirements into structured action plans.

• Monitor and report on application and infrastructure security posture using appropriate tooling
• Lead and support vulnerability assessments, remediation initiatives, and security tracking
• Develop, maintain, and improve security monitoring, logging, and alerting capabilities
• Configure, manage, and optimise Web Application Firewall (WAF) solutions
• Design, develop, and test code using Golang, Node.js, or Python
• Conduct code reviews and contribute to improving code quality
• Draft technical documentation, specifications, and implementation briefs
• Support secure CI/CD practices and infrastructure improvements

• Bachelor’s Degree or Advanced Diploma in Information Systems, Computer Science, Mathematics, Engineering, or a related field
• Alternatively, a minimum of 4 years’ equivalent experience in a DevSecOps role or a strong combined background in DevOps and security
• Hands-on experience working with containerised environments (Docker and Kubernetes preferred)
• Practical experience using Terraform, with a focus on integrating security controls
• Experience configuring and integrating CI/CD pipelines
• Experience working in Mac and/or Linux environments
• Exposure to monitoring and observability tools (e.g. Prometheus, Grafana, New Relic, Elastic APM)
• Proficiency in shell scripting

• Cloudflare (enterprise-level) exposure
• E-commerce or high-traffic application environments
• Microservices architecture and API security
• Google Cloud platform exposure (GKE, Compute Engine, BigQuery, Cloud SQL, etc.)
• Experience securing PHP-based applications

• Strong analytical and problem-solving ability
• Results-driven and detail-oriented
• Comfortable working collaboratively in a team-based environment
• Clear and effective communication skills
• Ability to build and maintain professional working relationships