THE NEXT CHAPTER STARTS WITH YOU
DevSecOps Engineer
Embed security, automation and resilience into the technology powering the next chapter of Vanquis
We've invested in modernising our technology landscape. The opportunity now is to strengthen how security is integrated across development and operations, helping teams deliver reliable change with confidence.
As a DevSecOps Engineer, you'll build secure Infrastructure as Code, contribute to CI/CD design, integrate security tooling and automated controls, and improve monitoring and incident response. You'll work across technical disciplines to protect software, data and customer outcomes while improving delivery performance and cost-effectiveness.
There's More to the Story
This role is part of a wider Technology & Change transformation, strengthening engineering foundations and building capabilities that can deliver value safely and sustainably.
How you'll make an impact
You'll...
So that...
Integrate security controls and tooling into CI/CD pipelines, automated testing and deployment processes
Vulnerabilities are identified earlier and software can move through delivery with stronger security assurance.
Develop secure, scalable Infrastructure as Code and automation using tools such as Terraform or CloudFormation
Infrastructure is provisioned consistently, efficiently and with security, reliability and cost in mind.
Implement monitoring, logging and alerting across development, test and production environments
Teams can identify issues quickly, respond proactively and reduce customer or operational impact.
Carry out vulnerability assessments and help define proportionate risk-mitigation actions
Security risks are understood, prioritised and addressed before they become incidents.
Support security incident response and troubleshoot complex infrastructure and deployment issues
Incidents are contained and resolved quickly, with clear learning fed back into engineering practices.
Collaborate with Product, Engineering, Technology & Change peers and third-party partners
Security becomes a shared responsibility and continuous improvement is embedded across delivery.
Why this role matters
Security must be built into modern software delivery. This role helps teams find vulnerabilities earlier, automate repeatable controls, improve service reliability and respond quickly when incidents occur. The result is safer change, stronger protection for critical assets and clearer compliance evidence.
Our DevSecOps approach
We believe in
What that means
Secure by design
Security controls are built into delivery rather than added at the end.
Automation first
Repeatable work is automated to improve speed, consistency and control.
Everything as code
Infrastructure and configuration are versioned, reviewable and reproducible.
Observable services
Monitoring, logging and alerting support early detection and faster recovery.
Shared ownership
Engineering, product, operations and security work together to manage risk.
Technology stack
Platforms & engineering
Security & operations
Terraform
Security scanning and vulnerability assessment
Python and automation scripting
Access control, authentication and encryption
CircleCI and Git
Monitoring, logging and alerting
AWS, Azure and GCP
Incident response and risk mitigation
Docker, Kubernetes, Istio and ArgoCD
Secure configuration and continuity planning
Essential experience
- Experience with cloud platforms such as AWS, Azure or GCP and container technologies such as Docker.
- Hands-on experience with Infrastructure as Code, ideally Terraform or CloudFormation, and automation scripting in a language such as Python.
- Practical knowledge of CI/CD tooling, Git-based version control and secure software delivery practices.
- Experience with security scanning, vulnerability assessment, monitoring, logging and incident response.
- Strong understanding of security principles, including encryption, access controls, authentication and infrastructure security.
- Strong analytical and problem-solving skills, with the ability to diagnose complex infrastructure, deployment and security issues.
- Confident collaboration across engineering, product, operations, security and third-party teams.
Useful, but not essential
- Experience with orchestration technologies and modern cloud-native delivery patterns.
- Knowledge of SRE principles, service reliability, capacity management and continuity planning.
- Experience working in financial services or another regulated technology environment.
- Relevant cloud, security, DevOps or infrastructure certification.
- Degree, equivalent professional qualification or substantial relevant work experience.
Career development
You will have opportunities to deepen your expertise across cloud security, automation, Infrastructure as Code and SRE practices, contribute to tooling decisions, lead improvement activity and provide guidance to junior DevSecOps engineers.
Why Vanquis?
Benefits & culture
Learning & wellbeing
Award-winning employer
LinkedIn Learning
Flexible working
Two volunteering days
Inclusive culture
Enhanced family leave
Up to 10% pension contribution
Paid birthday leave
25-30 days annual leave
Career development opportunities
Ready to shape what's next?
If you're looking for an opportunity to combine cloud engineering, automation and security while helping shape modern technology delivery at Vanquis, we'd love to hear from you.
Recruitment agency information
Our Talent Acquisition team manages all recruitment activity directly. We work with approved recruitment partners where additional support is required.
Unsolicited CVs submitted without prior agreement from Vanquis Talent Acquisition will be considered direct applications and no agency fees will be payable.
The Next Chapter Starts with You.
#YourVanquis. The Bank that's got your back. For our customers. For our colleagues. For what comes next.
Build your future. Shape ours.
Vanquis Chatham, England Office
Compass South, Chatham, United Kingdom, ME4 4EL
Vanquis London, England Office
20 Fenchurch Street, London, United Kingdom, EC3M 3BY
