Job Description
Overview
Home. There’s no place like it.
And there’s no feeling like helping people create the joy of feeling truly at home. At Dunelm, that’s what we do. We’re the UK’s number one choice for homewares because we make home life lovelier for our customers. And we’ve crafted a workplace that feels just as welcoming – where you can bring your ideas, be yourself, and feel right at home.
Work your way, together
We’re a hybrid business, which means you’ll have flexibility alongside time together with your team. In this role, you can expect a minimum of 1 day per week in our Leicester Office helping you stay connected, collaborate and do your best work for our customers.
The DevSecOps team helps make sure Dunelm’s technology is secure, reliable and easy for our engineering teams to use. We work across the business, partnering with product and engineering teams to build security into the software development process, improve our cloud platforms, automate controls, and remove friction so teams can deliver great products safely and quickly.
We’re a team that believes security works best when it’s an enabler, not a blocker and automation is the key. Whether we’re creating guardrails in AWS, expanding our use of Google Cloud, improving till security, or helping teams solve security challenges from a range of technologies, our focus is on making the right thing the easy thing.
Once you’ve settled in, you will join the 24×7 on call rota to respond to any security incidents.
What you’ll be doing:
This role requires hands-on experience across cloud security, CI/CD pipelines, infrastructure as code, vulnerability management. No two days are the same, as the technical security team, DevSecOps covers all areas of the business advising on security outcomes, for example; tills and self-checkout.
Some of the key areas are:
- Design, implement and improve DevSecOps controls throughout the Software Delivery Lifecycle.
- Integrate security tooling into CI/CD pipelines.
- Secure and govern multi-cloud environments across AWS and GCP.
- Develop cloud security baselines, guardrails, and best practices.
- Implement and maintain CSPM/CNAPP controls.
- Ensure cloud deployments comply with security standards and policies.
- Support threat modelling and security architecture reviews for cloud-native solutions.
- Assist with security investigations and incident response activities.
- Support detection engineering initiatives.
What we’ll look for in you:
We’re looking for someone who’s passionate about building secure, scalable technology and enjoys working with others to solve complex problems. You’ll be at your best in this role if you’re curious, collaborative and keen to keep learning.
You’ll be a great fit if you have experience with:
- Working in DevOps, Cloud Security, Platform Engineering, or DevSecOps roles.
- Cloud platforms, particularly AWS.
- Applying security principles within modern software development and cloud environments.
- Infrastructure as Code and automation tools such as Terraform, CDK or CloudFormation
- CI/CD pipelines and DevOps practices.
- Identifying, investigating and remediating security risks and vulnerabilities.
- Working closely with engineering teams to embed security into the development lifecycle.
- Python coding
- Have a collaborative mindset and can build positive relationships with technical and non-technical colleagues.
- Are naturally curious and enjoy learning new technologies, tools and ways of working.
- Take ownership of problems and see them through to a successful outcome.
- Can balance security, risk and business needs to make sensible, pragmatic decisions.
- Enjoy sharing knowledge and helping others grow.
It would be a bonus if you have experience with:
- Google Cloud Platform (GCP).
- Cloud security in a large-scale environment.
- Security testing, threat modelling or application security practices.
- Building developer-focused tooling, guardrails or self-service platform capabilities.
- Relevant cloud or security certifications.
Most importantly, don’t worry if your experience doesn’t match every item on this list. If you’re excited by the opportunity, enjoy learning, and believe you can make a positive impact, we’d love to hear from you.
D&I statement
Our commitment to you
Don’t meet every requirement? That’s okay.
If you’re excited about what this company is doing and think you could make a difference — at SheCanCode we still want to hear from you. Register your interest here, and our partners may reach out to explore opportunities, training, or mentorship.
Because potential is more important than perfection!
To apply for this job please visit www.dunelmcareers.com.
