Location
London (London Broadcasting House), Salford, Glasgow or Newcastle - Hybrid working available

Hours
Full Time - Permanent

Salary
Up to £57,500 per year depending on relevant skills, knowledge and experience

About the Role
Join the BBC MediaTech DevOps team as a DevSecOps Engineer. You will help build, operate and improve the software, platforms and automation that support secure software delivery across Media Technology. This role covers software engineering, cloud infrastructure, security tooling, CI/CD, vulnerability management and engineering automation. You will work on practical engineering problems alongside experienced engineers and teams, gaining exposure to various parts of DevSecOps and security engineering rather than specialising in a single platform or discipline. You will independently deliver well-scoped work and collaborate with senior engineers on larger technical changes, contributing to secure and reliable software delivery within the BBC.

Experience
- Building, maintaining and operating software services, integrations, automation or engineering tooling using at least one modern programming language
- Working with cloud infrastructure (preferably AWS), including Infrastructure as Code, automated software delivery and CI/CD practices
- Understanding of secure engineering principles such as APIs, authentication, access control, secrets management, monitoring and software security best practices
- Investigating technical issues, understanding unfamiliar systems and delivering practical engineering solutions with minimal supervision
- Using source control and automated testing, with clear communication of technical challenges and solutions within an engineering team

About you
- Strong interest in DevSecOps and security engineering
- Ability to work independently and collaboratively with senior engineers
- Enthusiastic about learning and applying secure engineering practices
- Comfortable working in a hybrid environment across multiple locations

Qualifications
While specific qualifications are not listed, relevant skills and experience in software engineering, cloud infrastructure, and security engineering are essential. Transferable strengths and a willingness to learn are highly valued.

Desirable Skills
- Experience with vulnerability management, application security, cloud security and related tooling such as dependency scanning, static analysis, secrets detection or container scanning
- Familiarity with modern cloud architectures including serverless, container-based, event-driven or microservice architectures
- Experience building integrations using APIs, webhooks and event-driven technologies
- Knowledge of logging, monitoring, alerting, incident investigation and operational support practices
- Contribution to shared engineering platforms or tooling, including use of AI-assisted development tools to improve productivity