DevSecOps Security Engineer — Cloud & App Security

IgniteByte Digital; Krugersdorp; On-site; ZAR 700,000 - 1,000,000; Full time

Job summary

IgniteByte Digital is seeking an experienced Cybersecurity Specialist to embed security across the development lifecycle. You will work hands-on with developers and DevOps to identify risks early, implement controls and deliver secure platforms.

The role focuses on application and cloud security, DevSecOps, threat monitoring and secure development practices, ensuring a secure, resilient digital platform aligned with modern standards.

Qualifications

• Diploma or Degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field.
• Demonstrable experience securing cloud-hosted web applications.
• Strong understanding of web application security (OWASP concepts).
• Practical knowledge of OWASP Top 10 and OWASP ASVS.
• Hands-on experience with secure coding practices and application security.
• Working knowledge of WAF, DDoS protection and HTTPS/TLS.
• Hands-on experience with Microsoft Defender for Cloud.
• Experience with Microsoft Sentinel or equivalent SIEM.
• Practical DevSecOps experience.
• Experience integrating security testing into CI/CD pipelines.
• Knowledge of SAST and DAST tools.
• Experience with vulnerability assessment and remediation.
• Understanding of penetration testing methodologies and findings.
• Working knowledge of POPIA and data-protection-by-design.
• Strong understanding of identity, authentication and access control.
• Strong analytical and problem-solving skills.
• Ability to work closely with developers, DevOps and technical teams.

Responsibilities

• Define and implement secure coding practices across the software development lifecycle.
• Perform application security reviews and identify potential vulnerabilities.
• Apply OWASP Top 10 and OWASP ASVS principles to web applications.
• Configure and validate HTTPS/TLS security.
• Support implementation and configuration of Web Application Firewall (WAF) controls.
• Support DDoS protection and cloud security controls.
• Configure and monitor security controls within the cloud environment.
• Work with Microsoft Defender for Cloud to identify and remediate security risks.
• Support continuous security monitoring using Microsoft Sentinel / SIEM or equivalent.
• Integrate security controls into CI/CD pipelines.
• Implement and support SAST and DAST security testing.
• Work with tools such as SonarQube, Snyk and OWASP ZAP.
• Support vulnerability assessment and remediation activities.
• Support third‑party penetration testing and remediation of findings.
• Participate in security incident response activities.
• Support security patching and vulnerability remediation after Go‑Live.
• Assist with security documentation, risk assessments and technical recommendations.
• Support POPIA and privacy‑by‑design requirements.
• Work closely with development and DevOps teams to embed security into the delivery process.

Skills

Cloud security

DevSecOps

OWASP Top 10

SIEM

WAF & TLS

POPIA privacy-by-design

Incident response

CI/CD security

Education

Diploma or Degree in Cybersecurity or related field

Tools

Microsoft Defender for Cloud

Microsoft Sentinel

Azure WAF

SonarQube

Snyk

OWASP ZAP

GitHub Advanced Security

GitHub / Azure DevOps

Job description

IgniteByte Digital is seeking an experienced Cybersecurity Specialist to embed security across the development lifecycle. You will work hands-on with developers and DevOps to identify risks early, implement controls and deliver secure platforms.

The role focuses on application and cloud security, DevSecOps, threat monitoring and secure development practices, ensuring a secure, resilient digital platform aligned with modern standards.