Principal Information Security Engineer - DevSecOps

Placements24; Kimberley; Remote; CAD 150,000 - 210,000; Full time

Benefits offered by this job

Fully remote work environment

Job summary

Placements24 seeks a Principal Information Security Engineer to champion DevSecOps within a remote-first software team. Design, implement, and automate security controls across the CI/CD lifecycle to enable faster, safer software delivery.

The role emphasizes secure coding, IaC security, and cloud security in a remote, high-impact setting. You will guide engineering teams, establish secure standards, and stay ahead of evolving threats in cloud-native environments.

Qualifications

• Master's degree in CS, Cybersecurity, or related field (or equivalent experience).
• 8+ years in software development, security engineering, or DevSecOps.

Responsibilities

• Design, implement, and maintain security tools and automation in CI/CD pipelines.
• Develop and enforce secure coding standards across engineering teams.
• Embed security across the SDLC with DevSecOps practices.
• Manage IaC security, container security, and cloud security controls.
• Automate security testing, vulnerability checks, and compliance in workflows.
• Create and maintain security documentation and runbooks.
• Provide security guidance to development teams.
• Review security of architectures and designs.
• Stay current with emerging DevSecOps and cloud-native threats.

Skills

DevSecOps

Security tooling

Secure coding

Collaboration

Education

Master's degree in CS/Cybersecurity

Tools

Jenkins

GitLab CI

Azure DevOps

AWS

Azure

GCP

Docker

Kubernetes

Terraform

Ansible

SAST

DAST

SCA

Python

Go

Bash

Job description

About the Role

Our client, a cutting-edge software development company, is seeking a Principal Information Security Engineer to champion DevSecOps principles within their engineering organization. This is a fully remote, high-impact role focused on integrating security seamlessly into the software development lifecycle (SDLC). You will be responsible for designing and implementing automated security controls, tools, and processes throughout the CI/CD pipeline, enabling faster and more secure software delivery. This is a unique opportunity to shape the future of secure software development in a remote-first, collaborative environment. This role is based in Kimberley, Northern Cape , but operates entirely remotely.

Key Responsibilities

• Design, implement, and maintain security tools and automation within the CI/CD pipeline (e.g., SAST, DAST, SCA, IAST).
• Develop and enforce secure coding standards and best practices across all engineering teams.
• Collaborate closely with development, QA, and operations teams to embed security throughout the SDLC.
• Implement and manage infrastructure as code (IaC) security, container security, and cloud security controls.
• Automate security testing, vulnerability scanning, and compliance checks within development workflows.
• Develop and maintain security documentation, architectural diagrams, and operational playbooks.
• Provide security guidance and training to development teams.
• Conduct security reviews of application architectures and infrastructure designs.
• Stay abreast of emerging security threats and technologies relevant to DevSecOps and cloud-native applications.

Requirements

• Master's degree in Computer Science, Cybersecurity, or a related field, or equivalent extensive experience.
• 8+ years of experience in software development, security engineering, or DevSecOps.
• Proven experience integrating security tools and automation into CI/CD pipelines (e.g., Jenkins, GitLab CI, Azure DevOps).
• Deep understanding of secure coding principles, OWASP Top 10, and common vulnerability types.
• Hands-on experience with cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).
• Proficiency in scripting languages (Python, Go, Bash) and IaC tools (Terraform, Ansible).
• Strong knowledge of application security testing methodologies (SAST, DAST, SCA).
• Excellent communication, collaboration, and problem-solving skills.
• Relevant certifications such as CISSP, CSSLP, or cloud security certifications are highly valued.

Benefits

• Highly competitive annual salary up to ZAR .
• Comprehensive global health coverage.
• Generous stock options and performance bonuses.
• Significant budget for professional development, conferences, and training.
• Fully remote work environment with flexible scheduling.
• Opportunity to lead and innovate in the field of DevSecOps for a forward-thinking company.