DevSecOps Engineer

Parvana; Cape Town; On-site; ZAR 550 000 - 750 000; Full time

Job summary

A fast-growing online business in Cape Town is seeking a DevSecOps Engineer to enhance their security posture. Candidates should have at least 4 years of experience in DevSecOps, strong problem-solving skills, and familiarity with containerized environments like Docker and Kubernetes. Responsibilities include monitoring security, leading vulnerability assessments, and developing secure coding practices. This role promises a collaborative culture and the potential for significant impact within a dynamic team environment.

Qualifications

• Minimum 4 years in DevSecOps or strong background in DevOps and security.
• Experience configuring, managing, and integrating CI/CD tools.
• Experience in Mac/Linux environments.

Responsibilities

• Monitor and report on the organization's security status.
• Lead assessments to identify and remediate vulnerabilities.
• Develop systems for security monitoring and alerting.

Skills

Team collaboration

Security monitoring

Vulnerability assessment

Shell scripting

Problem-solving

Education

Relevant tertiary qualification (Information Systems, Computer Science, etc.)

Tools

Docker

Kubernetes

Terraform

Prometheus

Grafana

NewRelic

Elastic APM

Cloudflare

Job description

Location: Cape Town | Job ID: J107095

About our client: Our client is a fast-growing online business based in South Africa. They are obsessive about their high performance yet collaborative culture and are looking for leaders to join their dynamic team. They think big, move fast, take ownership and are used to winning. They are lucky to be surrounded by colleagues who are experts in their field, working together to create a world class brand.

What you will be doing:

• Continuously monitor and report on the organization's security status using available tools.
• Lead regular assessments to identify vulnerabilities, remediate discovered issues, and track findings for continuous application security improvement.
• Develop and maintain systems for security monitoring, logging, and alerting to enhance overall security visibility.
• Configure, manage, and optimize Web Application Firewall (WAF) solutions to defend web applications against attacks.
• Design, develop, and test secure code in Golang, NodeJS, or Python, perform code reviews, and maintain/improve code quality while drafting technical documentation.

What our client is looking for:

• A relevant tertiary qualification would be beneficial (Information Systems, Computer Science, Mathematics, Engineering, etc.)
• Minimum 4 years in DevSecOps or strong background in both DevOps and security.
• Practical experience with containerized environments (Docker & Kubernetes preferred) and Terraform, with an emphasis on security integration.
• Experience in configuring, managing, and integrating into CI/CD tools and pipelines.
• Experience working in a Mac/Linux environment.
• Experience with various metrics and monitoring systems (e.g., Prometheus, Grafana, NewRelic, Elastic APM).
• Proficient in shell scripting, strong problem-solving and analytical skills, results-driven, team-comfortable, with good communication and relationship-building skills.
• Experience with Cloudflare enterprise, e-commerce, microservices/API security, Google Cloud (GCP), and securing PHP projects would be a bonus.