DevSecOps Security Engineer

Job Description

Job Title: DevSecOps Security Engineer – Run & Operate
Date: January 2025
Directorate: Tesco Mobile, Technology Operations
Department: Engineering
Location: Slough
Tesco Work Level: WL2
Full time/part time/job share: Full time
Reason for vacancy: New role
Job family: IT Development
Reports to: Run & Operate Chapter Lead

Join the best of the bunch!
We’re always looking for great people to join our team. Are you one of them?
We’re the UK’s biggest ‘virtual network operator’ (we’re powered by O2’s network) and for over a decade now we’ve won all the top awards for customer satisfaction.
We have a track record of doing things differently and shaking up the mobile industry. And we’re fiercely proud of being ‘supermarket mobile’, bringing the best of Tesco to more than five million customers.
Working for Tesco Mobile means being part of our small yet diverse and mighty team, where everyone is valued. Everyone gets the opportunity to get stuck in and make a difference – as well as the clout and perks that come with being part of Tesco and O2.

A few extra ingredients
We’re an Agile organisation. Agile helps us respond quickly to our customers, make the most of our diverse talents, and stay focused on what really matters. It’s more than just a ‘methodology’ to us – it’s our way for everyone to give their best.
We blend office and virtual working. The office is our base, and we work best when we’re together more than we’re apart. But we know that regular office time isn’t right for everyone, and we’re open to talking about complete location flexibility for some roles.
For a small organisation, we use a wide variety of technologies. Plus, our connections with O2 and Tesco means there’s lots of scope for varied and stimulating opportunities.
Interested? We’d love to hear from you.

About the team
The Tesco Mobile Engineering team is a truly cross functional team responsible for both the functional software development as well as the running and operation of bespoke and product / SaaS based IT solutions.
You will be working within a very diverse team of highly motivated and talented individuals on business-critical infrastructure management. Our teams are motivated and challenged, working in sprints across a range of technologies which together provide huge benefit to the wider business.
Within the Tesco Mobile Engineering team, we are the Run and Operate Chapter which manages the platforms and infrastructure used by many of the business services needed in Tesco Mobile. This role is part of the DevSecOps squad and reports to the Run and Operate Chapter Lead.
Within the Tesco Mobile Engineering team, we are the Run and Operate Chapter which manages the platforms and infrastructure used by many of the business services needed in Tesco Mobile. This role is part of the DevSecOps squad and reports to the Run and Operate Chapter Lead. The DevSecOps squad is responsible for the management of the infrastructure that powers all the Engineering systems and applications. The squad is also responsible for the software development tools and pipelines used across Tesco Mobile.

The squad consists of:
• DevSecOps Engineers
• Security Engineers
• QA Engineers
• Kubernetes Engineers
• Platform Automation Engineers

About the role
As one of our DevSecOps Security Engineers within the Run and Operate chapter, you will be helping the team manage and deploy solutions on a variety of platforms in a secure and optimised manner. This will include all aspects of security, maintaining an evolving programme of work to address prioritised concerns, helping to identify threats and risks and working to implement solutions and mitigations. You will also work with the rest of the squad to incorporate more security checks into the CI/CD pipelines. The role will include validation of planned changes to ensure that they comply with best practice and will also involve working with the Tesco Mobile Cyber Security Team.

Skills and experience
We are looking for the following skills & experience:
• Significant commercial experience with cloud and SaaS security improvement projects.
• Significant experience with cloud providers AWS and Azure.
• Experience of CI/CD pipelines and adding security tooling to these.
• Experience using SAST and other techniques to improve code security.
• Experience using AWS Security Hub, Azure Security Center, etc. to improve cloud security position.
• Willingness to learn new skills.

Nice to have:
• Source code systems and branching strategies; Github and Github Actions.
• Experience in a commercial setting using and managing Splunk including defining data streams, indices and ingests and dashboards.
• Experience maintaining and updating infrastructure using IaC tooling.
• Automation experience using a variety of tools and languages including AWS CLI, python, etc.
• Experience automating tasks using PowerShell or Azure CLI.
• Containerisation technologies; Docker and Kubernetes.
• Exposure to Continuous Integration and Continuous Deployment techniques, approaches and tools, including experience with the GitHub and GitHub Actions.

Key responsibilities
• Be a team player – live the Tesco Mobile values.
• Implement agreed security improvements to key platforms.
• Act as the subject matter expert for infrastructure security.
• Work with the application development teams to improve application security.
• Creating business justifications for security improvements and present these to Product Owners and other stakeholders in an articulate manner for an audience that may not be as technically experienced in Security Engineering.
• Share knowledge with other members of the squad.

Key stakeholders
• Marc Timperley - Run & Operate Chapter Lead
• DevSecOps Security Engineer
• DevSecOps Squad
• Cyber Security Team