Security Platform Engineer (DevSecOps) - SC (MOD/Defence)

Security Platform Engineer (DevSecOps)<br><br>Making sure you fit the guidelines as an applicant for this role is essential, please read the below carefully.<br>- MOD/Defence Farnborough UK Security Clearance Required £70-75k Kubernetes, Splunk, Nessus.<br><br>You'll own the security tooling across a live platform, not just monitor it.<br><br>Working for a defence consultancy providing technical solutions to the MOD and Defence sectors, you will be working across a Kubernetes platform, responsible for deploying, running and improving the tools that provide visibility, detection and control.<br><br>This is hands on and sits right between platform engineering and security, with a big focus on getting security embedded properly into how things are built and run.<br><br>You'll spend your time securing Kubernetes environments, running and tuning Splunk for logging and threat detection, and managing Nessus to track and drive vulnerability remediation.<br><br>A big part of the role is integrating security into CI/CD pipelines and automating as much as possible, whether that's through scripting or infrastructure as code.<br><br>You'll also be working closely with DevOps and engineering teams to make sure security is part of the process, not something that gets added later.<br><br>Alongside that, you'll keep configurations, artefacts and documentation in good shape and treated as code.<br><br>Experience Required: Prior experience as a Security Engineer or Platform Engineer type role, with strong Kubernetes knowledge and experience in tools like Splunk and Nessus.<br><br>You'll understand container security, have some scripting or automation capability, and be comfortable working with security frameworks .<br><br>Awareness of threat frameworks like ATT&CK is useful. xwzovoh <br><br>It would help if you've worked with other SIEM tools, Microsoft Defender or DevSecOps pipelines, and any exposure to threat modelling or security design.<br><br>If you want a role where you're actually building and running the security layer across a Kubernetes platform, rather than just watching dashboards, this gives you that ownership from day one.