DevSecOps Engineer

Mukuru; Wes-Kaap; Remote; ZAR 600 000 - 800 000; Full time

Job summary

A leading fintech company in South Africa is seeking an experienced DevSecOps Engineer to strengthen its security posture across platforms and applications. You will ensure that every deployment meets the highest security standards and you will automate and enhance security processes. The ideal candidate will have over 5 years of experience in IT systems security and a solid background in AWS production environments, along with strong expertise in CI/CD and cloud security. This role offers opportunities for growth within a dynamic team.

Qualifications

• 5+ years’ experience in IT systems security, DevOps, or DevSecOps.
• Proven experience managing AWS production environments.
• Strong understanding of CI/CD, cloud security, containerization, and API security.

Responsibilities

• Uplift and maintain Mukuru’s security posture across multiple environments.
• Integrate security tools into CI/CD pipelines.
• Monitor systems for breaches and vulnerabilities.

Skills

Problem-solving

Cloud security

Automation

Collaboration

Attention to detail

Education

Tertiary qualification in Computer Science or related field

Tools

Terraform

AWS GuardDuty

Tenable

Puppet

Cloudflare

Job description

Mukuru is one of Africa’s leading fintech companies, empowering millions across borders through accessible and secure financial services. We’re growing fast — and with that comes the responsibility to safeguard our systems, our people, and our customers.

We’re looking for a DevSecOps Engineer who’s passionate about cloud security, automation, and innovation — someone who thrives in solving complex problems, enjoys hands‑on technical work, and believes that great security enables great business.

About The Role

As a DevSecOps Engineer, you’ll play a key role in strengthening Mukuru’s security posture across all platforms, infrastructure, and applications. You’ll be the bridge between development, operations, and security, ensuring every line of code and every deployment meets the highest security standards.

From designing secure architectures to automating threat detection, this is your chance to shape the way Mukuru builds, protects, and scales its systems in a fast‑moving fintech environment.

What You’ll Do

Security Engineering & Automation

• Uplift and maintain Mukuru’s security posture across AWS, APIs, Kubernetes, WAFs, and Azure environments.
• Review, enhance, and automate security controls and tooling across multiple platforms.
• Integrate security tools into CI/CD pipelines to enable secure‑by‑design development.
• Manage vulnerability scanning, patching, and configuration hardening processes.
• Conduct regular security audits and implement best practices aligned with ISO27001, CIS20, and OWASP.

Monitoring & Incident Response

• Monitor systems for breaches, vulnerabilities, and suspicious activity.
• Build and improve alerting and visibility systems for proactive security monitoring.
• Investigate incidents, perform root‑cause analysis, and lead forensic investigations when necessary.
• Provide reporting and metrics to leadership for transparency and improvement.

Resilience & Reliability

• Support DR and BCM testing, ensuring system reliability under stress.
• Contribute to site reliability engineering initiatives and infrastructure resilience.

Continuous Improvement

• Test and evaluate emerging security technologies.
• Collaborate with engineering and product teams to embed security early in the SDLC.
• Stay informed on global cybersecurity trends and threats to keep Mukuru ahead of the curve.

What You’ll Bring

• 5+ years’ experience in IT systems security, DevOps, or DevSecOps.
• Proven experience managing AWS production environments.
• Strong understanding of CI/CD, cloud security, containerization, and API security.
• Experience with tools such as Terraform, AWS GuardDuty, Tenable, Puppet, Cloudflare, and WAFs.
• Familiarity with ISO27001, PCI DSS, POPIA, MITRE, CIS20, or OWASP frameworks.
• Tertiary qualification in Computer Science or related field (Essential).
• Certifications such as AWS Certified Security, CISSP, CISM, OSCP, or DevSecOps (Highly Desirable).

You’re Great At

• Problem‑solving complex technical issues with creativity and precision.
• Automating security processes to make protection scalable.
• Collaborating across teams while balancing security and delivery needs.
• Paying attention to the smallest details — because in security, every detail matters.
• Thinking ahead and staying curious about new technologies and risks.

I am sure you are reading this job description and meet the majority of the criteria, but you may still not feel 100% comfortable applying. We believe there is a place for everyone under the Mukuru sun and we want you to contribute to our diverse tapestry of talent. If you meet the majority of our requirements, come on, take a leap of faith, and send your application. Remember to include a snippet of how you will bring value and help us build a future of success that will help us determine where and how you may best be suited. Maybe you are just the future Mukurian we need!

Should you be appointed in a remote or work‑from‑home role at Mukuru, it is your responsibility to ensure that you have uninterrupted internet connectivity and a ‘work‑like’ environment at your home location, in order to deliver your best in terms of performance, productivity, and service to our customers.

If you do not receive any response after two weeks, please consider your application unsuccessful.

NB: ALL STAFF APPOINTMENTS WILL BE MADE WITH DUE CONSIDERATION OF THE COMPANY’S DIVERSITY AND INCLUSION PLANS.