DevSecOps Engineer – Arcadis Jobs Uk Edinburgh

Overview

Position Title: DevSecOps Engineer

Company: Arcadis

Location: Edinburgh, UK

Job Description

At Arcadis we focus on attracting, retaining and developing people who share our passion and commitment to improve quality of life. In return we offer you the opportunity to transform your world and the world around you, that could be through client work, upskilling yourself, championing equality and inclusion or getting involved in charity work, to name just a few. Our people value different perspectives, they care about the sustainability of our planet and dare to shape the future.

One of our core values is ‘people first’, and supported by our Lovinklaan foundation, we invest in you for the long term, to ensure you reach your full potential. You’ll have the opportunity to own your career and work on industry-defining projects, finding solutions to real challenges that make a difference to people’s lives. You’re encouraged to have a growth mindset and are given the space to develop personally and professionally, building a flexible career that works for you.

Responsibilities:

• Define CICD / Automation security requirements (e.g. least privilege principle).
• Define security testing requirements (such as static/dynamic analysis security testing, vulnerability scanning, penetration testing, etc.).
• Collaborate with Testing Team to automate security testing.
• Incident Management – solving incidents.
• Problem Management – root cause analysis.
• Change Management – participates with CAB (Change Advisory Board).
• Release Management – involved in release management.

Requirements:

• Experience in automating security testing as part of CICD pipelines.
• Ability to analyse vulnerability data to identify risks and false positives.
• Familiarity with Information Security frameworks/standards (i.e. CIS, NIST, RFC2196, etc).
• Developer level skills in GitHub Actions or GitLab CI/CD, Terraform and scripting (PowerShell and/or Bash). Experience in Ansible, JFrog, CMDB are desirable.