Principal Information Security Engineer - DevSecOps

Placements24; Noord-Kaap; Hybrid; ZAR 900,000 - 1,500,000; Full time

Benefits offered by this job

Remote work

Comprehensive health coverage

Stock options and performance bonuses

Budget for professional development,  

Fully remote with flexible scheduling

Leadership in DevSecOps

Job summary

Placements24 is seeking a Principal Information Security Engineer to champion DevSecOps within a remote-first engineering team. The role focuses on integrating security into the SDLC, designing automated controls across the CI/CD pipeline, and enabling faster, more secure software delivery.

You will lead security tooling, encode secure coding standards, and collaborate across development, QA, and operations to strengthen security in all layers.

Qualifications

• Master’s degree or equivalent extensive experience in CS or cybersecurity.
• 8+ years of software development or security engineering.
• Experience integrating security tools into CI/CD pipelines.
• Strong secure coding and OWASP Top 10 knowledge.
• Hands-on with multi-cloud platforms and container security.
• Proficient scripting (Python/Go/Bash) and IaC tooling.
• Certifications such as CISSP or CSSLP valued.

Responsibilities

• Design, implement, and maintain security tooling in the CI/CD pipeline.
• Develop secure coding standards across engineering teams.
• Embed security across the SDLC with cross-functional collaboration.
• Manage IaC security, container security, and cloud security controls.
• Automate security testing, vulnerability scanning, and compliance checks.
• Produce security docs, diagrams, and runbooks.
• Provide security guidance and training to developers.
• Conduct security reviews of architectures and infrastructure.
• Stay updated on threats and DevSecOps trends.

Skills

DevSecOps

CI/CD security

SAST

DAST

SCA

IAST

Jenkins

GitLab CI

Azure DevOps

Cloud security

IaC security

Docker

Kubernetes

Terraform

Ansible

Python

Go

Bash

OWASP Top 10

CISSP

CSSLP

Education

Master’s degree in Computer Science, Cybersecurity, or related field

or equivalent extensive experience

Tools

AWS

Azure

GCP

Docker

Kubernetes

Terraform

Ansible

Jenkins

GitLab CI

Azure DevOps

CI/CD tools

Job description

About the Role

Our client, a cutting-edge software development company, is seeking a Principal Information Security Engineer to champion DevSecOps principles within their engineering organization. This is a fully remote, high-impact role focused on integrating security seamlessly into the software development lifecycle (SDLC). You will be responsible for designing and implementing automated security controls, tools, and processes throughout the CI/CD pipeline, enabling faster and more secure software delivery. This is a unique opportunity to shape the future of secure software development in a remote-first, collaborative environment. This role is based in Kimberley, Northern Cape , but operates entirely remotely.

Key Responsibilities

• Design, implement, and maintain security tools and automation within the CI/CD pipeline (e.g., SAST, DAST, SCA, IAST).
• Develop and enforce secure coding standards and best practices across all engineering teams.
• Collaborate closely with development, QA, and operations teams to embed security throughout the SDLC.
• Implement and manage infrastructure as code (IaC) security, container security, and cloud security controls.
• Automate security testing, vulnerability scanning, and compliance checks within development workflows.
• Develop and maintain security documentation, architectural diagrams, and operational playbooks.
• Provide security guidance and training to development teams.
• Conduct security reviews of application architectures and infrastructure designs.
• Stay abreast of emerging security threats and technologies relevant to DevSecOps and cloud-native applications.

Requirements

• Master’s degree in Computer Science, Cybersecurity, or a related field, or equivalent extensive experience.
• 8+ years of experience in software development, security engineering, or DevSecOps.
• Proven experience integrating security tools and automation into CI/CD pipelines (e.g., Jenkins, GitLab CI, Azure DevOps).
• Deep understanding of secure coding principles, OWASP Top 10, and common vulnerability types.
• Hands‑on experience with cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).
• Proficiency in scripting languages (Python, Go, Bash) and IaC tools (Terraform, Ansible).
• Strong knowledge of application security testing methodologies (SAST, DAST, SCA).
• Excellent communication, collaboration, and problem‑solving skills.
• Relevant certifications such as CISSP, CSSLP, or cloud security certifications are highly valued.

Benefits

• Highly competitive annual salary up to ZAR .
• Comprehensive global health coverage.
• Generous stock options and performance bonuses.
• Significant budget for professional development, conferences, and training.
• Fully remote work environment with flexible scheduling.
• Opportunity to lead and innovate in the field of DevSecOps for a forward‑thinking company.