DevSecOps Security Engineer

IGNITEBYTE DIGITAL (PTY) LTD; South Africa; On-site; ZAR 450,000 - 750,000; Full time

Job summary

IgniteByte Digital (Pty) Ltd is seeking a hands-on Cybersecurity Specialist to safeguard client website redevelopment projects. The role requires embedding security throughout the development lifecycle, working directly with developers and DevOps to identify risks early and implement controls for secure, production-ready platforms.

You will focus on application and cloud security, DevSecOps, threat monitoring and secure development practices, ensuring the platform is resilient and compliant with

Qualifications

• Diploma or Degree in Cybersecurity, IT, CS, Information Systems or related field.
• Experience securing cloud-hosted web applications.
• Strong understanding of web application security.
• Hands-on DevSecOps experience.
• Experience with WAF, DDoS protection and HTTPS/TLS.

Responsibilities

• Define and implement secure coding practices across the software development lifecycle.
• Perform application security reviews and identify potential vulnerabilities.
• Configure and monitor security controls within the cloud environment.
• Support integration of security controls into CI/CD pipelines.
• Implement and support SAST/DAST testing and vulnerability remediation.
• Participate in security incident response activities.

Skills

Cloud security

DevSecOps

Web application security

OWASP Top 10

HTTPS/TLS

DDoS protection

CI/CD security

SAST/DAST

Penetration testing

SIEM

Education

Diploma or Degree in Cybersecurity/IT/CS

Tools

Microsoft Defender for Cloud

OWASP ZAP

SonarQube

Snyk

GitHub Advanced Security

Job description

IgniteByte Digital (Pty) Ltd is seeking a hands-on Cybersecurity Specialist to safeguard client website redevelopment projects. The role requires embedding security throughout the development lifecycle, working directly with developers and DevOps to identify risks early and implement controls for secure, production-ready platforms.

You will focus on application and cloud security, DevSecOps, threat monitoring and secure development practices, ensuring the platform is resilient and compliant with