Devsecops Engineer

About the role

The Tesco Mobile Development team is a truly cross-functional team responsible for the functional software development of bespoke and product/SaaS based IT solutions.

You will be working within a very diverse team of highly motivated and talented individuals on business-critical full-stack development. Our teams are motivated and challenged, working in sprints across a range of technologies which together provide huge benefit to the wider business.

As a DevSecOps Engineer within the Run and Operate chapter, you will be helping the team manage and deploy the environment in a secure and optimised manner. This will include managing the logging and SIEM aspects of the infrastructure and coordinating with application development teams to resolve issues. You will also work with the rest of the squad to incorporate more security checks into the CI/CD pipeline. The role will include validation of planned changes to ensure that they comply with best practice and will also involve working with the Tesco Mobile Cyber Security Team.

You will be responsible for

• Team player - live the Tesco Mobile values
• Work with the Chapter Lead to agree improvements to the security of the infrastructure and applications
• Define and refine infrastructure security standards
• Act as the subject matter expert for infrastructure security
• Work with the application development teams to refine logging to derive valid insights
• Work as part of the team to solve complex cross-business technical problems
• Creating business justifications for security improvements and present these to Product Owners and other stakeholders in an articulate manner for an audience that may not be technical
• Share knowledge with other members of the squad

You will need

• Significant commercial experience with security operations management
• Significant experience with cloud providers AWS and Azure
• Experience in a commercial setting using and managing Splunk including defining data streams, indices, ingests, and dashboards
• Experience of CI/CD pipelines and adding security tooling to these
• Experience using SAST and other techniques to improve code security
• Experience using SonarCloud, AWS Security Hub, etc. to improve security position
• Willingness to learn new skills
• Desirables: Source code systems and branching strategies; Github and Github Actions, experience maintaining and updating infrastructure using IaC tooling

What's in it for you

We're all about the little helps. That's why we give our wonderful colleagues bags of benefits. Including wellbeing services, an award-winning pension scheme, and much, much more, our colleague reward package keeps on giving. And helps make every day a little better for you and your family. These include but are not limited to:

• Annual bonus scheme of up to 20% of base salary
• Holiday starting at 25 days plus a personal day (plus Bank holidays)
• Buy holiday salary sacrifice scheme (for salaried roles)
• Private medical insurance
• Retirement savings plan - save between 4% and 7.5% and Tesco will match your contribution
• Life Assurance - 5 x contractual pay
• 26 weeks maternity and adoption leave (after 1 years' service) at full pay, followed by 13 weeks of Statutory Maternity Pay or Statutory Adoption Pay, we also offer 4 weeks fully paid paternity leave
• The right to request flexible working from your first day with us
• Free 24/7 virtual GP service, Employee Assistance Programme (EAP) for you and your family, free access to a range of experts to support your mental wellbeing
• A Colleague Clubcard for you & a family member (after 3 months of service), giving you access to lots of discounts in-store & online
• Great colleague deals and discounts, saving you money on everyday purchases, eating out and utility bills for the home
• Access to our colleague networks providing a space for colleagues to come together from a range of backgrounds.
• Opportunities to get on - take advantage of our ongoing learning opportunities and award-winning training, to help you achieve the job and career you want

About us

A 50-50 joint venture between Tesco and VMO2 that was established back in 2003, Tesco Mobile has gone from strength to strength as we've launched into new services and markets. With more than 5 million customers, we're the largest mobile virtual network operator in the UK. We're proud to have an inclusive culture that's uniquely Tesco Mobile, with a strong sense of community, plus all the benefits of working for one of the shareholders.

We care for human connection and we keep our customers at the heart of everything we do, which is why we've embraced the Agile way of working. Agile is more than just a methodology - it's a liberating journey that puts customers and purpose first. It empowers us to self-organise, collaborate, co-create and rapidly inspect and adapt everything we do - allowing us to respond at pace to our customers' needs. It encourages variety of thought and enables us to thrive, both individually and collectively.

We are proud to have an inclusive culture at Tesco where everyone truly feels able to be themselves. At Tesco, we not only celebrate diversity but recognise the value and opportunity it brings. We're committed to creating a workplace where differences are valued, and make sure that all colleagues are given the same opportunities. We're proud to have been accredited Disability Confident Leader and we're committed to providing a fully inclusive and accessible recruitment process. For further information on the accessibility support we can offer, please click here.

We're a big business and we can offer a range of diverse full-time & part-time working patterns across our many business areas, which means that we can find something that works for you. We work in a more blended pattern - combining office and remote working. Our offices will continue to be where we connect, collaborate and innovate. If you are applying internally, please speak to the Hiring Manager about how this can work for you - Everyone is welcome at Tesco.