{"id":4032875,"url":"https://alion.io/job/blue-tree-group-devsecops-engineer","title":"DevSecOps Engineer","company":{"id":697825,"name":"Blue Tree Group","domain":"bluetreegroup.co.uk","url":"https://alion.io/company/bluetreegroup","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Rotherham, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon S3","optional":false},{"name":"AWS","optional":false},{"name":"Azure DevOps","optional":false},{"name":"C#","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"IAM","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"Least Privilege","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"PCI DSS","optional":false},{"name":"Pulumi","optional":false},{"name":"TeamCity","optional":false},{"name":"Terraform","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-11-10T15:55:56Z","employer_posted_date":"2026-11-10","last_verified_at":"2026-11-11T05:13:58Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"We're a leading e-commerce print company operating two distinct online brands, Route 1 Print and Instantprint. Our core mission is simple: to make print buying as easy as possible for small businesses.\nAn opportunity has arisen for a DevSecOps Engineer to join our technology team. You'll be responsible for the security of the cloud infrastructure and development pipelines behind both brands - and for fixing the issues you find.\nAbout the Role\nMore of our code is now written with AI. That speeds up delivery, but every change still has to be secure - and the volume of change moving through our pipelines makes that impossible to guarantee by hand. This role exists to build security into how we ship, and to keep our cloud infrastructure in good shape.\nThis is a hands-on engineering role, not an advisory one. You will be responsible for actioning and fixing security findings, not just reporting them. When a scan flags a vulnerable dependency, a misconfigured bucket, or an over-permissive role, you'll take technical ownership of the remediation, delivering fixes directly wherever possible and coordinating with other teams when needed.\nYou'll work closely with our website, internal systems, and IT teams, agreeing priorities with them and making the changes yourself wherever you can.\nWhat You'll Do\nTake technical ownership of security findings across our cloud, application, and internal environments: triaging and prioritising them by real risk, delivering fixes directly wherever possible, and coordinating remediation with other teams when needed.\nFix issues within agreed timescales by severity, and report open findings and how long they've been open to the leadership team each month.\nWhere practical, introduce automated controls, tests, or monitoring to prevent resolved security issues from recurring.\nImplement and maintain automated security scanning across our CI/CD pipelines, covering application code, dependencies, containers, and Infrastructure as Code (IaC). Configure and tune the tooling to identify genuine risks without unnecessarily slowing development.\nSet guardrails for AI-written code, including checks on new dependencies and clear limits on what AI coding tools and agents can access.\nHarden the pipelines themselves: branch protection, least-privilege permissions, and short-lived deployment credentials.\nOwn the security of our AWS environment - least-privilege IAM, S3 access, logging, and threat detection.\nReview our existing infrastructure on an ongoing basis against recognised benchmarks such as CIS, making the updates and configuration changes required.\nUse automation and Infrastructure as Code wherever practical to implement consistent, repeatable security improvements rather than relying on manual configuration changes.\nAssess and improve the security of application APIs and third-party integrations, addressing authentication, authorisation, and configuration weaknesses.\nOwn the output of our vulnerability scanning, working with our IT team to get internal systems patched and configured correctly.\nAbout You\nA background in DevOps, platform, or cloud engineering, now specialising in security. This role needs someone who builds and fixes, not someone who only audits.\nStrong experience (typically 4+ years) across DevOps or cloud engineering, with a significant focus on security.\nHands-on AWS security experience, including IAM, S3, CloudTrail, GuardDuty, Security Hub, and AWS Config.\nHands-on ownership of CI/CD pipelines (e.g., GitHub Actions, Jenkins, TeamCity, Azure DevOps), including adding security gates to them.\nPractical experience implementing and managing application security tooling, including static analysis (SAST), software composition analysis (SCA), secrets scanning, and Infrastructure as Code security scanning.\nComfortable reading and fixing application code in at least one modern language (e.g., C#, Java, Go, or similar).\nExperience with Infrastructure as Code (e.g., Terraform, CloudFormation, Pulumi), and a sharp eye for insecure configurations within it.\nKnowledge of containerisation (e.g., Docker) and how to secure images and container workloads.\nAn understanding of the security risks AI-assisted development introduces, and how to manage them without slowing down delivery.\nThe judgement to prioritise by real risk, alongside the confidence to take ownership, challenge existing thinking, and see fixes through.\nSecurity certifications (e.g., AWS Certified Security - Specialty) or experience with Cyber Essentials Plus, ISO 27001, or PCI DSS are beneficial, but not essential.\nWhy Join Us\nReal ownership: Security across our cloud and delivery pipelines - you set the standards and make the fixes.\nPreventive, engineering-led focus: 24/7 threat monitoring is handled by our managed detection partner, so your time goes into making things more secure.\nModern tooling: Investment in modern security tooling, with the freedom to shape how security is integrated into our development processes.\nHigh impact: High-traffic, commercially critical platforms where your work protects the business and our customers.\nGreat culture: A culture that values curiosity, experimentation, and continuous learning.\nWork-life balance: Flexible, hybrid working and a small, capable team.\nWhy Join the Bluetree Team?\nAt Bluetree Group, we don’t just print; we innovate. We believe in investing in the people who make our success possible. Here’s how we look after you:\nHealth First: Access to a market-leading Health Cash Plan and comprehensive wellbeing support, including onsite training and free external support.\nFamily Support: Enhanced maternity, paternity, and adoption packages to support your life outside of work.\nRest & Recharge: 22 days annual leave (plus Bank Holidays), with a \"Length of Service\" programme that earns you more days the longer you stay.\nSocial: From regular team socials to our legendary annual Summer and Christmas Parties, plus biennial Long Service celebrations - we know how to celebrate success.\nFinancial Wellness: Enrolment in our company pension scheme.\nRewards: Access to various discounts via Bluetree Rewards, weekend break giveaways, and long-service gifts to mark your milestones starting from year 1!\nCareer Development: We champion personal development with a wide range of internal and external training opportunities available.\nFitness: Save on a new bike with our Cycle to Work scheme, or join our weekly football team to burn off some steam!\nDaily Comforts: Fuel your day with free fruit, snacks, and beverages in our modern canteen.\nEasy Commute: Free onsite parking at our state-of-the-art facility. We are also ideally located for public transport, just minutes from Mexborough, Swinton, and Wombwell train stations.\nAbout Bluetree Group\nWe exist to make print buying easy and small businesses look exceptional. Established in 1989, Bluetree Group has grown to be the UK’s largest online printer. Based in Wath upon Dearne (conveniently located near Sheffield, Rotherham, Barnsley, and Doncaster), our 165,000 sq. ft. facility is the heart of our operation. From the moment you walk through our doors, you’ll realise that our people are central to everything we do.\nReady to grow with us?\nFor Privacy information, please follow this link to our privacy notice on our website homepage: https://www.bluetreegroup.co.uk","description_format":"text","description_chars":7349,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Annual leave","Continuous learning","Hybrid work"],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Packaging & Labeling","B2B Commerce"],"lifecycle":[{"event":"open","at":"2026-11-10T19:08:54Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-11-11T06:25:45+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:0","win:early"],"computed_at":"2026-11-11T05:49:22Z"},"pay":null,"html_url":"https://alion.io/job/blue-tree-group-devsecops-engineer","json_url":"https://alion.io/job/blue-tree-group-devsecops-engineer.json","meta":{"generated_at":"2026-11-11T07:20:04Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11076,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-12T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":697825},"rest":"https://alion.io/mcp/rest/get_company?id=697825"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fblue-tree-group-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fblue-tree-group-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fblue-tree-group-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/blue-tree-group-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fblue-tree-group-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4032875}},{"tool":"search_jobs","arguments":{"company":"bluetreegroup.co.uk","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4032875},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}