DevSecOps Engineer

Communicate Recruitment; Wes-Kaap; On-site; ZAR 900,000 - 1,200,000; Full time

Job summary

Communicate Recruitment seeks a DevSecOps Engineer to embed security across deployments and pipelines within a cloud environment. The role focuses on automating risk detection, strengthening AWS environments, and promoting a security-first culture across engineering teams.

You will work hands-on with Terraform, CI/CD, and security tooling while collaborating with architects and developers to build secure platforms that scale and adapt to evolving threats.

Qualifications

• Experience in DevSecOps or Cloud Security roles.
• Hands-on with Terraform, AWS, CI/CD and automation.
• Familiar with security frameworks, IAM and encryption.
• Practical use of SAST/DAST and vulnerability management tools.
• Interest in AI-driven security and modern threat detection.

Responsibilities

• Embed security controls into every deployment and pipeline.
• Automate vulnerability detection and remediation across platforms.
• Integrate security practices into CI/CD workflows.
• Design secure, resilient cloud environments and guardrails.
• Champion shift-left and secure-by-design principles.
• Collaborate with engineers and tech leaders on security strategy.
• Provide visibility through monitoring and observability.

Skills

DevSecOps

Security Engineering

Cloud Security

Automation

AI/ Emerging Tech

Security Innovation

Tools

Terraform

AWS

CI/CD

Datadog

Rapid7

CrowdStrike

Job description

Our client is a forward-thinking technology business that believes great engineering and great security should go hand in hand. They are building modern cloud platforms, investing in automation, AI, and scalable infrastructure, and they are looking for a DevSecOps Engineer to help lead the charge. This is a hands-on opportunity to embed security controls, strengthen AWS environments, and champion a security-first culture across engineering teams. If you are the type of person who sees a manual process and immediately wants to automate it, sees a security risk ad wants to engineer it out of existence, and hears "we've always done it this way" as a challenge rather than an explanation, you'll fit right in.

Key responsibilities

• Be the guardian of the gates, building security into every deployment, pipeline, and platform before threats even get a chance to knock.
• Hunt down vulnerabilities like a digital bounty hunter and automate their detection before they become tomorrow's problem.
• Turn security best practices into engineering superpowers by embedding them directly into CI/CD pipelines and development workflows.
• Design cloud environments that are secure, resilient, and ready for anything the internet decides to through at them.
• Champion the "shift-left" movement, helping developers catch issues early when fixes are quick and coffee consumption remains reasonable.
• Build security guardrails that keep teams moving fast without driving off a compliance cliff.
• Partner with engineers, architects, and technology leaders to make security everyone's responsibility, not just a team's job title.
• Transform complex security risks into practical solutions that real humans can actually understand and implement.
• Create visibility across the platform through monitoring , reporting, and observability, because you can't protect what you cant see.
• Explore emerging technologies and AI-driven solutions that push the boundaries of what's possible in modern security engineering.
• Lead the charge toward a secure-by-design future where security is woven into every decision, every release, and every success story.
• In short: You'll be part security strategist, part automation wizard, part cloud defender, and part engineering enabler, helping build platforms that are as secure as they are innovative.

Job Experience and Skills Required:

• You've built a career in DevSecOps, Security Engineering, or Cloud Security and know how to stop problems before they start.
• Terraform, AWS, CI/CD, and automation are your trusted sidekicks.
• You know your way around security frameworks, cloud security, IAM, encryption, and secure-by-design principles.
• SAST, DAST, vulnerability management, and security tooling aren't just buzzwords on your CV, they're tools you've used in the real world.
• You're constantly looking for smarter, faster, more secure ways of doing things.
• You solve problems, automate repetitive tasks, and leave every platform stronger than you found it.
• You've worked with TypeScript, Java, Datadog, Rapid7, or CrowdStrike.
• AI, emerging technology, and security innovation genuinely excite you.