Lead DevSecOps Engineer: Secure CI/CD & Cloud

Old Mutual South Africa; Johannesburg; On-site; ZAR 800,000 - 1,200,000; Full time

Job summary

Old Mutual South Africa is seeking a DevSecOps Engineer to drive the integration of security into the DevOps lifecycle and elevate the organization’s security posture. You will lead security automation, vulnerability management, and comprehensive monitoring across AWS and Azure.

Mentor and collaborate with cross-functional teams, embedding security into pipelines and infrastructure provisioning. This senior role demands hands-on expertise and strategic influence within the security program.

Qualifications

• Bachelor's degree in Computer Science or related field or equivalent experience.
• 5+ years in DevOps, cloud security or platform security.
• Proven experience leading DevSecOps initiatives and embedding security into enterprise delivery pipelines.
• Strong practical experience securing AWS and Azure cloud environments.

Responsibilities

• Lead security automation within CI/CD pipelines.
• Oversee vulnerability scanning and remediation.
• Design and maintain comprehensive security monitoring solutions.
• Drive incident response efforts and continuous improvement of response capabilities.
• Enforce security in Infrastructure as Code (IaC) scripts and secure configurations.
• Lead security governance and compliance initiatives.
• Collaborate with cross-functional teams and mentor junior engineers.

Skills

Python

Bash scripting

IAM

Cloud security

CI/CD security

Automation

Vulnerability management

Education

Bachelor's degree in Computer Science or related field

Tools

Terraform

CloudFormation

GitHub Actions

Azure DevOps

Jenkins

Job description

Old Mutual South Africa is seeking a DevSecOps Engineer to drive the integration of security into the DevOps lifecycle and elevate the organization’s security posture. You will lead security automation, vulnerability management, and comprehensive monitoring across AWS and Azure.

Mentor and collaborate with cross-functional teams, embedding security into pipelines and infrastructure provisioning. This senior role demands hands-on expertise and strategic influence within the security program.