Senior DevSecOps Engineer: Secure SDLC & Cloud

RWA People; Auckland; On-site; NZD 120,000 - 180,000; Full time

Job summary

RWA People is seeking a senior security professional to embed security across the software lifecycle, working with engineering and product teams to enable secure delivery. The role focuses on DevSecOps, application security, and integrating security into CI/CD, with threat modelling and risk management playing key parts.

You'll influence security strategy, support risk assessments and incident response, and mentor others while helping teams ship securely and rapidly.

Qualifications

• Strong hands-on DevSecOps or application security experience.
• Experience embedding security within engineering, development or product teams.
• Ability to engage credibly with developers and architects.
• Integrate security into CI/CD pipelines (SAST/DAST/SCA and IaC scanning).
• Cloud security knowledge, ideally Azure or major cloud platform.
• Experience securing APIs, containers, Kubernetes or serverless.
• Knowledge of secure SDLC, threat modelling and secure coding principles.
• Experience with security automation, vulnerability scanning and tooling.
• Understanding of security risk management frameworks such as NIST/ISO 27001.
• Strong communication skills to challenge technical decisions constructively.

Responsibilities

• Embed security practices across the SDLC and DevOps lifecycle.
• Work with developers, architects and platform teams on secure design.
• Integrate security controls into CI/CD pipelines and tooling.
• Conduct code reviews and security testing; provide secure coding guidance.
• Support threat modelling and identify application, API and cloud risks.
• Improve security automation, vulnerability management and tooling.
• Provide pragmatic security advice to keep delivery velocity.
• Contribute to the organisation's wider security strategy and programme.
• Assist with security risk assessments, incident response and threat intel.
• Mentor security colleagues and lift security capability across tech teams.

Skills

DevSecOps

Application security

CI/CD pipelines

Threat modelling

Cloud security

Security automation

Secure coding

Security testing tools

NIST ISO27001

Security communication

Tools

SAST

DAST

SCA

IaC scanning

Job description

RWA People is seeking a senior security professional to embed security across the software lifecycle, working with engineering and product teams to enable secure delivery. The role focuses on DevSecOps, application security, and integrating security into CI/CD, with threat modelling and risk management playing key parts.

You'll influence security strategy, support risk assessments and incident response, and mentor others while helping teams ship securely and rapidly.