DevOps Engineer (Security Operations)

Skin Analytics Ltd • TRAFFIC • London, Not Specified, United Kingdom • 13h ago

In this role you will lead the charge in securing and scaling our infrastructure and CI/CD pipelines for regulated clinical software. Working cross-functionally with engineering, QA, product, and regulatory teams, you'll design, implement, and monitor secure, traceable DevOps workflows. You enable rapid, compliant delivery of Software as a Medical Device (SaMD) products.

Please note: this role requires in office presence for 3 days a week. Our office is in Farringdon, London. If you can't commit to this, please don't apply.

Responsibilities

Own SecOps across our stack by managing secure AWS infrastructure, CI/CD pipelines, and developer environments using least-privilege and zero-trust principles.
Integrate automated security scans (Snyk, Docker, IaC) into all stages of the SDLC.
Design, implement, and maintain AWS infrastructure as code using Terraform and Ansible
Deliver threat models and drive remediations across cloud services (EC2, S3, RDS, etc.).
Build Docker-first workflows with image scanning, tagging, and artifact management.
Write and own SOPs for secure deployment and incident response aligned to ISO 27001 and IEC 62304.
Extend observability through CloudWatch/ELK stack dashboards, anomaly detection, and alerting for security and performance monitoring.
Support Transformation team by resolving any security queries that clients might have in their onboarding & deployment

What success looks like:
3 months

Complete access audits and enforce secure MFA + least-privilege access across AWS, Bitbucket, and key tools
Identify and remediate top 5 security risks in CI/CD pipelines and cloud architecture
Fully integrate Snyk into all pipelines with automated alerts and reporting

6 months

Mature pipelines to support automated tests, security gates, and gated deploys across all services

12 months

Implement full-stack observability with anomaly alerts and dashboards for security and reliability using the ELK stack

Have deep expertise in:

Cloud Infrastructure (AWS): EC2, S3, RDS, IAM, VPC, CloudWatch, CloudTrail, Lambda, SQS/SNS
CI/CD Pipelines: Bitbucket Pipelines (or similar), multi-stage pipeline management, gated deployments
Security Operations: Snyk, IAM policies, threat modeling, zero-trust access, MFA, secrets management
Implementing and automating compliance requirements (IEC 62304, ISO 27001, HIPAA, MDR)
Delivering secure software pipelines for Node.js, React, and Docker-based services
Writing secure deployment ansible playbooks and participating in internal audits or regulatory submissions
Production workloads supported by Terraform and ansible, hosted on AWS
Strong networking knowledge, including VPCs, subnets, routing tables, security groups, and NACLs, route53, load balancers

Behaviours required:

Takes ownership: full accountability for infra, tooling, and controls; sees it through to completion.
Bias for automation: believes manual work should be temporary, builds repeatable pipelines and workflows.
Detail obsessed: doesn't miss the small stuff. Every commit, config, and policy matters in regulated software.
Clear communicator: explains risks, trade-offs, and technical plans to both engineers and non-tech stakeholders.
Collaborative & pragmatic: works well across disciplines and adapts to real-world constraints.

Competitive salary

Share options package - all our employees have ownership in the company

Private healthcare

25 days annual leave (5 day company shutdown in August + bank holidays)

Enhanced parental leave - includes adoption & foster

Bike to work scheme

Training budget

Weekly catch-ups, monthly meetings to talk about you, your ambitions and make plans

Lots of fun social activities including company offsite!

Our Values

Building a Strong Foundation

Always Learning

Lead from the Front

Tough and Resilient

The Real Stuff

Skin Analytics embraces and is committed to diversity and equal opportunities. We are dedicated to building a team that represents a variety of backgrounds, perspectives, and skills. The more inclusive we are, the better our work will be.

Related Jobs

Network Engineer - Hedge Fund - IP, Arista, Automation, Switching, AWS, Ansible/Python - Contract

Scope AT Limited • APPLICATION • London, Not Specified, United Kingdom • 7h ago

Engineer

Network Engineer - Hedge Fund - IP, Arista, Automation, Switching, AWS, Ansible/Python - Contract Network Engineering team based in London Currently our hedge fund client is in the process of getting ready for an office...

7h ago

Apply

Senior C++ Contract Engineer - SQL, Unix/Linux, Oracle, Kafka, Finance, C#, GUI

Scope AT Limited • APPLICATION • London, Not Specified, United Kingdom • 7h ago

Engineer

Senior C++ Contract Engineer - SQL, Unix/Linux, Oracle, Kafka, Finance, C#, GUI Our financial services client is looking for an experienced Senior C++ Software Engineer to help grow and enhance their platform. As a Senio...

7h ago

Apply

IT Infrastructure Engineer

Carrington West • TRAFFIC • London, Not Specified, United Kingdom • 13h ago

Engineer

Overview Are you an IT Engineer with experience supporting Managed Service Providers (MSP) / working as an Internal Help Desk function? Salary: Dependant on Experience. Location: Central London - 3 days in the office, 2...

13h ago

Apply

Databrick Platform Engineer - Outside IR35 Contract

Tenth Revolution Group • TRAFFIC • London, Not Specified, United Kingdom • £400 - £500 / * • 21h ago

Engineer Outside IR35

Databricks Platform Engineer - Outside IR35 Contract Please note - this role will require you to be based in the UK with the unrestricted right to work in the UK. This organisation is not able to offer sponsorship. An ex...

21h ago

Apply

Snowflake Engineer

Hays Specialist Recruitment Limited • TRAFFIC • London, Not Specified, United Kingdom • £600 - £800 / * • 21h ago

Engineer

Snowflake Engineer - Database, Automation, DevOps £Market Rate (Inside IR35) London / Hybrid 6 months We are currently working with a client who urgently require a Snowflake Engineer with Snowflake expertise as well as e...

21h ago

Apply

Infrastructure Operations and Monitoring Engineer

Adecco • TRAFFIC • London, Not Specified, United Kingdom • £500 - £540 / * • 23h ago

Engineer Umbrella

Infrastructure Operations & Monitoring Engineer Location: Liverpool Street, London (2-3 days on site) Contract: 6 months (likely to extend - long-term project) Day Rate: 540 (Via Umbrella) Are you passionate about au...

23h ago

Apply

IT Support Engineer

Global Technology Solutions Ltd • TRAFFIC • London, Not Specified, United Kingdom • £150 / * • 1d ago

Engineer Umbrella

IT Support Engineer (Junior - 1st/2nd Line) Location: London (onsite) Duration: 3-6 months Rate: £150 per day (umbrella only /inside IR35) Scope of Work Provide hands-on support for laptops, desktops, and mobile devices...

1d ago

Apply

Infrastructure Operations and Monitoring Engineer

Adecco • TRAFFIC • London, Not Specified, United Kingdom • £500 - £540 / * • 1d ago

Engineer Umbrella

Infrastructure Operations & Monitoring Engineer Location: Liverpool Street, London (2-3 days on site) Contract: 6 months (likely to extend - long-term project) Day Rate: £540 (Via Umbrella) Are you passionate about a...

1d ago

Apply

Senior Data Engineer

Adecco • TRAFFIC • London, Not Specified, United Kingdom • £550 - £600 / * • 1d ago

Engineer

Location - London, Bristol or Manchester (1 day a month onsite) Duration - 6 months Rate - £550 - £600pd (inside ir35) As a Data Engineer in the Cyber and Domains Protection Team you will: Work within an Agile team to su...

1d ago

Apply

IT Support Engineer

Global Technology Solutions Ltd • ATS • London, Not Specified, United Kingdom • 1d ago

Engineer Umbrella

IT Support Engineer (Junior - 1st/2nd Line) Location: London (onsite) Duration: 3-6 months Rate: £150 per day (umbrella only/inside IR35) Scope of Work Provide hands-on support for laptops, desktops, and mobile devices (...

1d ago

Apply