DevSecOps developer
Create software applications that outsmart hackers - by making security a priority from the very start.
Also known as: DevOps developer, software developer
About the job
What it's like
DevSecOps is short for development, security and operations. The difference between this and other types of development is a focus on security from the start of a project. By including security planning and testing in your initial development process, you avoid having to make major changes to resolve security flaws later.
You’ll generate ideas, bring them to life with your development skills, and then test the results in a secure environment to make sure there are no defects or bugs that could be exploited. This is a fast-paced role that will continually challenge your technical skills and push you to find creative new approaches to development.
What you’ll do
Write secure code – usually in short, highly focused phases known as 'sprints'
Forensically analyse short segments of code to try and find weak points
Check code using cybersecurity tools such as Codacy, GitLab or Aqua
Update code to remove any vulnerabilities
Design automated security functions to flag up any security concerns
Quickly react to feedback and data to make sure any changes don’t derail the wider development schedule
Contribute to creating the technical specification
Follow news of emerging cybersecurity threats so you know what to protect your code against
Explore more information about this job
Here are some useful links to learn more about this career:
Like the sound of this career?
Browse courses in Scotland related to 'DevSecOps developer'
Select qualification level(s)
Other careers that you might like
Games developer Software developer App developer Machine learning engineer Software engineer Game designer AR/VR programmer Blockchain developer DevOps engineer Audio programmer Lead game engineer Project analyst Robot programmer Artificial intelligence engineer
Related industries
Many jobs can be done in lots of different industries. We've highlighted the ones we think are most important for this job.
Finance, law and professional services Engineering and manufacturing Digital technologies Construction and built environment
Top skills
Skills are things you're good at. Whether you know what yours are or not, everyone has them!
It's useful to learn which ones are important in a job so you know the areas you need to brush up on. It can also help you work out if you're suited to a career.
Meta skills
Here are some of the meta skills you'll need to do this job.
- taking responsibility
- developing a plan
- attention to detail
- researching
- questioning
- problem solving
- written communication
- working with technology
- building relationships
- adaptability
Your skills are important
Our unique skillsets are what make us stand out from the crowd. Learn about each skill in depth and discover what employers look for in your applications and interviews.
Getting in
Explore each section to find more information about getting into this career.
Colleges and universities will list subjects you'll need for entry to a course. Some useful subjects include:
Computing Science
Maths (Mathematics)
Physics
Foundation Apprenticeship: Hardware and Systems Support
Foundation Apprenticeship: Software Development
Applications of Mathematics
You can get a head start in this career by doing a Foundation Apprenticeship in S5 and S6.
You'll get an SCQF level 6 qualification which is the same level as a Higher. You'll also learn new skills and gain valuable experience in a work environment.
Discover what's on offer at your school on Apprenticeships.scot.
You can develop the necessary skills for this role through a variety of routes.
Many DevSecOps developers will have studied at degree level in a technical subject, such as:
Software development
Software engineering
Computer science
Information systems
Others will have qualifications in a scientific or numerical subject such as maths or physics.
Employers may consider graduates from non-computing subjects if they can demonstrate essential technical knowledge. There are also postgraduate IT conversion courses available to graduates with a non IT background, who need to strengthen their technical skills.
Apprenticeships
You can gain skills and qualifications in the workplace through options such as:
Foundation Apprenticeships (FAs) are chosen as one of your subjects in S5 and S6 but include hands-on learning at a local employer or college. They are the same level as a Higher.
You might want to consider an FA in areas such as:
Software development
IT: Hardware and system support
Modern Apprenticeships (MAs) mean you learn on the job. You get paid and work towards a qualification at the same time.
You might want to consider an MA in areas such as:
IT and telecoms - technical
Information security - technical
Digital applications
Graduate Apprenticeships (GAs) are designed for industry and you'll spend most of your time learning on the job but you'll also go to uni. You'll get a job, get paid and work towards a qualification at the same time.
You might want to consider a GA in areas such as:
Cyber security
Not all employers list specific qualification requirements but they might ask for relevant experience, usually work based, that shows a range of transferable skills.
You'd usually be expected to demonstrate up to date in-depth knowledge of software design, coding and programming developments as well as an understanding of testing and auditing software in order to anticipate potential security threats.
There are a variety of certifications and training courses available to gain further knowledge in cyber security, including Systems Security Certified Practitioner (SSCP), Certified Professional (CCP) scheme and Certified Information System Security Professional (CISSP), depending on your level of experience.
Find the right course for you
Browse courses in Scotland related to 'DevSecOps developer'
