DevSecOps & AppSec Specialist: Threat Modeling & CI/CD

Boardroom Appointments; Cape Town; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

Boardroom Appointments seeks a Cyber Security Specialist with DevSecOps expertise to secure product development and automate security in CI/CD pipelines. You will lead threat modelling, secure coding practices, and vulnerability management, while providing AppSec training and defining security standards across teams.

The role requires hands-on security testing, container/Cloud security experience (AWS/Azure), and strong collaboration with the SecOps team to advance security initiatives within

Qualifications

• 3-year IT or NQF aligned qualification in IT or security.
• Minimum 5 years of cyber security experience, with 3 years in DevSecOps.
• Hands-on experience integrating security into CI/CD and SDLC.
• Experience with secure coding and app security testing.

Responsibilities

• Secure product development by embedding security early in SDLC.
• Maintain and enhance toolsets for mature product security including pen testing and secure coding.
• Verify security of internal and external apps during development and deployment.
• Perform threat modelling and strengthen infrastructure, platform, and app security.
• Provide AppSec training and create learning materials.
• Define documentation and standards for application security processes.
• Guide and enhance CI/CD security tooling for cloud platforms (AWS/Azure).
• Collaborate with SecOps and stakeholders to drive security initiatives.

Skills

DevSecOps

CI/CD security

AppSec

Threat modelling

Cloud security

Automation

Vulnerability management

Security testing

SAST/DAST

Container security

Education

3-year IT or NQF aligned Qualification

Tools

AWS

Azure

Terraform

SonarCube

CI/CD tooling

Containerization

Job description

Boardroom Appointments seeks a Cyber Security Specialist with DevSecOps expertise to secure product development and automate security in CI/CD pipelines. You will lead threat modelling, secure coding practices, and vulnerability management, while providing AppSec training and defining security standards across teams.

The role requires hands-on security testing, container/Cloud security experience (AWS/Azure), and strong collaboration with the SecOps team to advance security initiatives within