BBC Career Opportunities Security Software Engineer

JOB BAND: C
CONTRACT TYPE: Permanent Full-time
DEPARTMENT: DevSecOps
LOCATION: London Salford Glasgow or Newcastle - Hybrid
PROPOSED SALARY RANGE: up to 57500 depending on relevant skills knowledge and experience. The expected salary range for this role reflects internal benchmarking and external market insights.

Were happy to discuss flexible working. If youd like to please indicate your preference in the application though theres no obligation to do so now. Flexible working will be part of the discussion at offer stage.

Join BBC MediaTech DevOps team as a DevSecOps Engineer. Youll help build operate and improve the software platforms and automation that support secure software delivery across Media Technology. The role spans software engineering cloud infrastructure security tooling CI/CD vulnerability management and engineering automation. Youll work on practical engineering problems alongside experienced engineers and engineering teams. The role is intended to give you exposure to different parts of DevSecOps and security engineering rather than specialising in a single platform or security discipline.

WHY JOIN THE TEAM

Youll work on practical engineering problems alongside experienced engineers and engineering teams. Youll be expected to independently deliver well-scoped pieces of work while working with senior engineers on larger or more complex technical changes. The role is intended to give you exposure to different parts of DevSecOps and security engineering rather than specialising in a single platform or security discipline.

YOUR KEY RESPONSIBILITIES AND IMPACT

• Build integrations that connect security engineering and organisational data to make findings easier for teams to understand and act on. Build maintain and improve backend services integrations automation and internal engineering tools.
• Work with AWS infrastructure and Infrastructure as Code to deliver and operate secure cloud-based services. Help integrate security checks and controls into CI/CD workflows including dependency scanning code scanning secrets detection and container or infrastructure security tooling.
• Apply secure engineering practices around identity and access management secrets logging monitoring data handling and least-privilege access. Help operate and improve security and vulnerability-management platforms used by engineering teams.
• Investigate technical issues across services integrations cloud infrastructure and security platforms and implement appropriate fixes. Write automated tests documentation and operational tooling to support reliable production services.
• Deliver well-defined engineering changes independently from implementation through testing and deployment. Work with senior engineers on larger pieces of work contributing to technical design estimation and implementation.
• Work with engineering teams to understand security or operational problems and help implement practical solutions. Contribute reusable code patterns documentation and automation where these can help other teams.
• Use AI-assisted engineering tools where they provide useful support for coding testing investigation automation or security analysis.

ESSENTIAL

• Software Engineering & Delivery -Experience building maintaining and operating software services integrations automation or engineering tooling using at least one modern programming language.
• Cloud & Platform Engineering -Experience working with cloud infrastructure (preferably AWS) including Infrastructure as Code automated software delivery and CI/CD practices.
• Security & Operational Awareness -Understanding of secure engineering principles including APIs authentication access control secrets management monitoring and software security best practices.
• Problem Solving & Technical Ownership -Ability to investigate technical issues understand unfamiliar systems and deliver practical engineering solutions with minimal day-to-day supervision.
• Engineering Collaboration -Experience using source control and automated testing with the ability to clearly communicate technical challenges solutions and implementation decisions within an engineering team alongside a strong interest in DevSecOps and security engineering.

DESIRABLE

• Application & Cloud Security Tooling -Experience with vulnerability management application security cloud security and related security tooling such as dependency scanning static analysis secrets detection or container scanning.
• Modern Cloud Architectures -Experience working with serverless container-based event-driven or microservice architectures.
• Integration Development -Experience building integrations using APIs webhooks and event-driven technologies.
• Operational Excellence -Experience with logging monitoring alerting incident investigation and other operational support practices.
• Platform & Engineering Enablement -Experience contributing to shared engineering platforms or tooling including the use of AI-assisted development tools to improve engineering productivity.

If you can bring some of these skills and experience along with transferable strengths wed love to hear from you and encourage you to apply.