DevSecOps Engineer

- Own the end-to-end vulnerability lifecycle - from identification and validation through to remediation, verification and closure - Identify and remediate vulnerabilities across cloud (Azure/AWS) and on-prem environments - Use security and posture management tooling (e.g. Defender for Cloud, Azure Advisor, AWS Inspector, Security Hub) to detect and prioritise risks - Translate security findings into clear, actionable remediation plans - Work closely with engineering teams to implement secure fixes, ensuring changes are properly tested and deployed safely - Remediate vulnerabilities through patching, configuration hardening and application of security controls - Validate remediation through re-scanning and verification processes - Deploy and scale fixes using Infrastructure as Code (Terraform) and DevOps practices across multiple environments - Produce clear documentation covering risk, root cause, remediation and residual risk - Track and report on vulnerability trends, SLAs and security posture improvements - Continuously improve vulnerability management processes, including triage, prioritisation and exception handling - Support the implementation of secure configuration baselines and security best practices