Devsecops Engineer

Old Mutual; Johannesburg; On-site; ZAR 900,000 - 1,300,000; Full time

Job summary

Old Mutual in Johannesburg seeks a senior DevSecOps engineer to lead security automation across CI/CD pipelines, driving secure coding and automated testing within the release process.

You will oversee vulnerability management, security monitoring, incident response and IAM/secrets governance while partnering with DevOps to embed security into infrastructure provisioning and operations. 5+ years in DevSecOps with AWS/Azure experience is required.

Qualifications

• Bachelor's degree or equivalent practical experience in CS/Info Security.
• 5+ years across DevOps, cloud engineering, cybersecurity or platform security.
• Proven experience leading DevSecOps initiatives in enterprise pipelines.
• Strong experience securing AWS and Azure environments.
• Advanced understanding of CI/CD, IaC, container security and automated vulnerability management.
• Expert scripting in Python and/or Bash.
• Knowledge of IAM, encryption, secrets management, secure configurations and incident response.

Responsibilities

• Security automation leadership in CI/CD pipelines and testing.
• Oversee vulnerability scanning and remediation processes.
• Lead security monitoring design, implementation, and maintenance.
• Drive incident response, analyze events and improve response capabilities.
• Enforce secure IaC practices and collaborate with DevOps teams.
• Implement secure configuration management baselines with operations teams.
• Lead security governance and compliance initiatives.
• Mentor junior and intermediate DevSecOps engineers.

Skills

DevSecOps leadership

Cloud security

CI/CD security

Python / Bash

IAM & secrets mgmt

Linux administration

Docker / ECS / Fargate

Security monitoring

Incident response

AWS / Azure

Education

Bachelor's degree in Computer Science or Information Security

Tools

Terraform

AWS CloudFormation

Azure Monitor

GitHub Actions

Jenkins

Postman

Job description

Description

• Security Automation Leadership: Play s key role in the development and optimization of security automation scripts and tools within CI/CD pipelines. Champion the implementation of advanced automated security testing processes.
• Vulnerability Management and Remediation: Oversee and manage vulnerability scanning and assessment processes, ensuring swift identification and remediation of security vulnerabilities.
• Security Monitoring: Lead the design, implementation, and maintenance of comprehensive security monitoring solutions.
• Incident Response: Drive incident response efforts, analyze security events, and contribute to continuous improvement of response capabilities.
• Infrastructure as Code (IaC) Excellence: Enforce security best practices in Infrastructure as Code (IaC) scripts. Collaborate with DevOps teams to integrate advanced security measures into infrastructure provisioning.
• Secure Configuration Management: Implement secure configuration management practices for infrastructure components. Set and monitor secure configuration baselines in collaboration with operations teams.
• Security Governance and Compliance: Lead the establishment of security governance policies and compliance standards.
• Collaboration and Mentorship: Collaborate with cross-functional teams, providing guidance on security practices in DevOps processes. Mentor and coach junior and intermediate DevSecOps engineers.

Qualifications and Experience

• Bachelor's degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.
• 5+ years of relevant experience across DevOps, cloud engineering, cybersecurity or platform security.
• Proven experience leading DevSecOps initiatives and embedding security into enterprise delivery pipelines.
• Strong practical experience securing AWS and Azure cloud environments.
• Advanced understanding of CI/CD, Infrastructure as Code, container security and automated vulnerability management.
• Expert scripting and automation capabilities using Python and/or Bash.
• Strong knowledge of IAM, encryption, secrets management, secure configurations and security incident response.
• Experience with Linux, Docker, ECS/Fargate, cloud monitoring and production operations.
• Working knowledge of SQL, REST APIs and enterprise integration troubleshooting.
• Relevant AWS, Azure, DevSecOps or advanced security certifications are advantageous.

Technology Stack

• Cloud platforms: AWS, Microsoft Azure
• AWS services: ECS, Fargate, EC2, RDS, S3, IAM, CloudWatch, cloud networking
• CI/CD: Azure DevOps, GitHub Actions, Jenkins, GitLab CI/CD
• Infrastructure as Code: Terraform, AWS CloudFormation, Bicep or equivalent
• Containers: Docker, container registries, image scanning and hardening
• Operating systems: Linux administration, patching, shell scripting and log analysis
• Scripting and automation: Python, Bash
• Security: Vulnerability scanning, security testing, secrets management, encryption, IAM and compliance controls
• Monitoring and observability: AWS CloudWatch, Azure Monitor and enterprise monitoring platforms
• Version control: Git and collaborative development workflows
• Databases and SQL: Amazon RDS, SQL querying, database access controls and connectivity troubleshooting
• API and integration security: REST APIs, HTTP, JSON, authentication, certificates, Postman and curl

Skills

Action Planning, Application Development, Data Compilation, Data Management, Evaluating Information, Executing Plans, Information Technology (IT) Support, IT Network Security, Market Analysis, Product Development, Test Case Management

Competencies

Business InsightCourageCultivates InnovationCustomer FocusDecision QualityDrives ResultsEnsures AccountabilityManages Ambiguity

Education

NQF Level 7 - Degree, Advance Diploma or Postgraduate Certificate or equivalent

Closing Date

09 November 2026 , 23:59