DevSecOps Engineer

Let's Write Africa's Story Together!

Old Mutual is a firm believer in the African opportunity and our diverse talent reflects this.

Job Description

As a DevSecOps Engineer, you will play a key role in the integration of security practices into our DevOps processes, ensuring the highest level of security across the software development lifecycle. This role is suited for a seasoned professional with deep expertise in DevOps, security, and automation. You will provide mentorship to team members and collaborate with various stakeholders to enhance the organization's security posture.

Group Technology & Data | MDM

Description

• Security Automation Leadership: Play s key role in the development and optimization of security automation scripts and tools within CI/CD pipelines. Champion the implementation of advanced automated security testing processes.
• Vulnerability Management and Remediation: Oversee and manage vulnerability scanning and assessment processes, ensuring swift identification and remediation of security vulnerabilities.
• Security Monitoring: Lead the design, implementation, and maintenance of comprehensive security monitoring solutions.
• Incident Response: Drive incident response efforts, analyze security events, and contribute to continuous improvement of response capabilities.
• Infrastructure as Code (IaC) Excellence: Enforce security best practices in Infrastructure as Code (IaC) scripts. Collaborate with DevOps teams to integrate advanced security measures into infrastructure provisioning.
• Secure Configuration Management: Implement secure configuration management practices for infrastructure components. Set and monitor secure configuration baselines in collaboration with operations teams.
• Security Governance and Compliance: Lead the establishment of security governance policies and compliance standards.
• Collaboration and Mentorship: Collaborate with cross-functional teams, providing guidance on security practices in DevOps processes. Mentor and coach junior and intermediate DevSecOps engineers.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.
• 5+ years of relevant experience across DevOps, cloud engineering, cybersecurity or platform security.
• Proven experience leading DevSecOps initiatives and embedding security into enterprise delivery pipelines.
• Strong practical experience securing AWS and Azure cloud environments.
• Advanced understanding of CI/CD, Infrastructure as Code, container security and automated vulnerability management.
• Expert scripting and automation capabilities using Python and/or Bash.
• Strong knowledge of IAM, encryption, secrets management, secure configurations and security incident response.