Senior DevSecOps Engineer - Secure CI/CD & Cloud-native

Jobtailor; Cape Town; On-site; ZAR 600,000 - 900,000; Full time

Job summary

Jobtailor is seeking an Application Security professional to own security in the SDLC and CI/CD pipelines. You will integrate security controls (SAST/DAST/SCA), support threat modeling, and collaborate with architecture teams to ensure secure design and compliance.

You will assist developers with vulnerability triage and remediation, tune tools to minimize false positives, and contribute to audits and evidence generation. Container security and cloud-native practices are central to the role.

Qualifications

• Strong grounding in application security concepts and secure coding practices.
• Experience with SAST, DAST, SCA and software supply-chain security.
• Ability to influence engineering teams through collaboration and credibility.
• Hands-on expertise with containers and orchestration platforms like Docker and Kubernetes.

Responsibilities

• Own security controls within CI/CD pipelines and secure SDLC practices.
• Support threat modeling and secure design reviews with architecture teams.
• Assist with vulnerability triage, remediation, and evidence generation for audits.
• Configure and maintain security tooling integrations in CI/CD environments.

Skills

Application Security Concepts

CI/CD Security

SAST

DAST

SCA

Container Security

Tools

GitHub Actions

GitLab CI

Jenkins

Azure DevOps

Docker

Kubernetes

Terraform

Bicep

CloudFormation

Job description

Jobtailor is seeking an Application Security professional to own security in the SDLC and CI/CD pipelines. You will integrate security controls (SAST/DAST/SCA), support threat modeling, and collaborate with architecture teams to ensure secure design and compliance.

You will assist developers with vulnerability triage and remediation, tune tools to minimize false positives, and contribute to audits and evidence generation. Container security and cloud-native practices are central to the role.