[Hiring] Senior DevSecOps Engineer @Bilue

Role Description

As a Senior DevSecOps Engineer at Bilue, you own the security, compliance and operational integrity of the AWS and Azure platforms we run for our clients, including their AI workloads. You will run the infrastructure, harden the pipelines, take the alerts our SOC partner escalates through to closure, and keep our ISO 27001 evidence audit ready. This is a hands-on role inside the codebase, working alongside our engineers rather than reviewing their work from a distance. This role is a technical lead, but there are no people management responsibilities and you will have no direct reports.

Responsibilities

• Operate and maintain AWS and Azure infrastructure, CI/CD pipelines, infrastructure as code and environment configuration across client platforms.
• Triage security alerts escalated by our third party SOC, drive each one through to remediation and closure, and lead the post incident review.
• Monitor security posture and manage vulnerability remediation across the infrastructure and application layers, including patching and dependency updates.
• Review pull requests alongside the development team and embed security controls into build and deployment processes in line with agreed policies.
• Manage identity, access controls, secrets and API credentials across both clouds, including key rotation and least privilege reviews.
• Maintain observability, alerting, backup and disaster recovery capability, and run regular recovery and restoration testing.
• Maintain infrastructure and security compliance to ISO 27001, covering configuration standards, logging, audit evidence and closure of control gaps.
• Use AI responsibly and in line with Bilue's AI policies, treating it as a tool to work smarter while keeping human judgement at the centre of your decisions.

Qualifications

• Real craft in your work, you build the security gate rather than only switching on the scanner, and you care that a fix actually holds.
• A consultative approach, you can explain a risk and its trade offs to a client or an engineer without hiding behind jargon.
• A passion for connection, you share what you find and lift the security knowledge of the whole team rather than keeping it to yourself.
• Ownership and accountability, happy to be the security escalation point and to take an alert through to closure without being chased.
• A drive to shape solutions, curious enough to trace a dependency alert through to real exploitability in the codebase and then work with developers on the fix.

Requirements

• Strong hands on experience operating production workloads across both AWS and Azure in a cloud security, DevSecOps or platform engineering role.
• Cloud security services in production: GuardDuty, Security Hub, IAM, KMS and CloudTrail on the AWS side, or Defender for Cloud, Entra ID, Key Vault and Azure Policy on the Azure side.
• Confident writing and reviewing Terraform or equivalent infrastructure as code.
• Able to read application code, raise security issues at the code level, and understand how APIs, services and databases fit together in a running platform.
• Able to diagnose faults across the stack and run root cause analysis, tracing a vulnerability from a dependency alert through to real exploitability, then working with developers on the fix.
• CI/CD pipeline experience, including building the security gates rather than only configuring a scanner.
• Practical security alert triage and incident response alongside an external SOC or MSSP.
• Working knowledge of ISO 27001 controls and audit evidence.
• AWS Security Specialty, AZ-500 or an equivalent certification.

Nice to Have

• A background in platform or backend delivery, with experience building and shipping systems rather than only securing them.

Benefits

• Connection that counts: From monthly Anchor Days and team lunches to our annual offsite, we create intentional moments to connect, collaborate, and celebrate.
• Flexibility that works: We offer flexible hours, aligned with AEST so you can collaborate with the wider team.
• Strong internal communities: We actively foster internal communities across tech, design, delivery, AI and beyond.
• Opportunities to grow: We invest in your development with unlimited access to our learning library, partnership networks and certification pathways.
• Flat structure, real impact: At Bilue, everyone's voice matters, and we operate without unnecessary layers.