DevSecOps Engineer

THE NEXT CHAPTER STARTS WITH YOU

DevSecOps Engineer

Build security into every stage of software delivery at Vanquis

We're modernising our technology landscape and strengthening how security, reliability and automation are embedded across the software development lifecycle.

As a DevSecOps Engineer, you'll integrate security into development and operations, build secure Infrastructure as Code, strengthen CI/CD pipelines and help teams identify vulnerabilities earlier. You'll combine hands-on engineering, problem-solving and collaboration to protect our software, data and customer outcomes.

There's More to the Story

Vanquis is evolving. We're investing in our people, modernising how we work, strengthening customer experiences and building new capabilities across the business.

How you'll make an impact

• Integrate security controls and tooling into CI/CD pipelines, automated testing and deployment processes
• Develop secure, scalable Infrastructure as Code and automation using tools such as Terraform or CloudFormation
• Implement monitoring, logging and alerting across development, test and production environments
• Carry out vulnerability assessments and help define proportionate risk-mitigation actions
• Support security incident response and troubleshoot complex infrastructure and deployment issues
• Collaborate with Product, Engineering, Technology & Change peers and third-party partners

Why this role matters

Secure, reliable delivery is essential to protecting customers, colleagues and critical business services. This role helps embed security earlier, reduce avoidable vulnerabilities and improve the speed and confidence of technology change.

The Engineering Principles we build around

• Secure by design: Security controls are built into delivery rather than added at the end.
• Automation first: Repeatable work is automated to improve speed, consistency and control.
• Everything as code: Infrastructure and configuration are versioned, reviewable and reproducible.
• Observable services: Monitoring, logging and alerting support early detection and faster recovery.
• Shared ownership: Engineering, product, operations and security work together to manage risk.
• Continuous improvement: Incidents, vulnerabilities and delivery evidence are used to strengthen the platform.

The tools helping us shape what's next

• Infrastructure as Code: Terraform, CloudFormation and secure configuration management.
• CI/CD and source control: Jenkins, Travis CI, CircleCI, Git and automated quality gates.
• Cloud and containers: AWS, Azure, GCP and Docker.
• Security and observability: vulnerability scanning, access controls, monitoring, logging and alerting.
• Automation: Python and other high-level scripting languages.

Essential experience

• Hands-on experience with Infrastructure as Code, ideally Terraform or CloudFormation, and automation scripting in a language such as Python.
• Practical knowledge of CI/CD tooling, Git-based version control and secure software delivery practices.
• Experience with cloud platforms such as AWS, Azure or GCP and container technologies such as Docker.
• Experience with security scanning, vulnerability assessment, monitoring, logging and incident response.
• Strong understanding of security principles, including encryption, access controls, authentication and infrastructure security.
• Strong analytical and problem-solving skills, with the ability to diagnose complex infrastructure, deployment and security issues.
• Confident collaboration across engineering, product, operations, security and third-party teams.

Useful, but not essential

• Experience with orchestration technologies and modern cloud-native delivery patterns.
• Knowledge of SRE principles, service reliability, capacity management and continuity planning.
• Experience working in financial services or another regulated technology environment.
• Relevant cloud, security, DevOps or infrastructure certification.
• Degree, equivalent professional qualification or substantial relevant work experience.

Why Vanquis?

• Great Place to Work Certified
• Financial Times Best Employers 2025 & 2026
• Armed Forces Friendly Employer, Bronze
• Flexible working
• Inclusive culture
• Up to 10% pension contribution
• 25-30 days annual leave
• LinkedIn Learning
• Two volunteering days
• Enhanced family leave
• Paid birthday leave
• Career development opportunities

Ready to shape what's next?

If you're looking for an opportunity to embed security into modern engineering, improve automation and help shape the future of Technology & Change at Vanquis, we'd love to hear from you.

Recruitment agency information

• Our Talent Acquisition team manages all recruitment activity directly. We work with approved recruitment partners where additional support is required.
• Unsolicited CVs submitted without prior agreement from Vanquis Talent Acquisition will be considered direct applications and no agency fees will be payable.
• The Next Chapter Starts with You.