CYBER SECURITY SPECIALIST: DevSecOps, IT CYBER SECURITY
On-siteCape Town, Western Cape, South Africa
Cape Town, Western Cape, South AfricaOn-siteFull TimeSmall
Full TimeSmall
Job Summary
Integrate security practices early in the software development lifecycle to secure internally and externally developed applications. Prescribe, maintain, and enhance toolsets for pen testing, secure coding, and source code analysis while investigating new automation approaches. Verify application security during and after development, perform threat modeling, and define standards for application security processes and tooling. Collaborate with the SecOps Team to champion internal security solutions and provide AppSec training to raise stakeholder awareness.
Required Qualifications
- 3-year IT or NQF aligned Qualification
- 5 years relevant experience in cyber security, with at least 3 years in a DevOps / DevSecOps capacity
- Hands on practical experience in DevOps / DevSecOps and the ability to integrate security into the CI/CD processes
- Hands on practical experience in application security testing
- Extensive knowledge of DevSecOps principles, practices, and tools, including containerization, orchestration, and automation
- Experience in securing CI/CD pipelines on Cloud platforms, specifically AWS and Azure
- Experience with infrastructure-as-code tools (e.g., Terraform)
- Basic scripting experience and skills
- Solid experience in Secure Code Development practices and tools, e.g., SonarCube
- Good understanding of common security libraries, frameworks, and tools
- Ability to explain the common security flaws as well as potential ways to address them
- Deep technical skills and ability to automate manual processes
- Bloodhound approach to security
- Relentless pursuit of threat identification and remediation
- Relevant research and translation into defence
- Very good people skills to engage with the various stakeholders across the business, while ensuring that professionalism is maintained
- Ability to engage with and contribute to the Information Security community
- May be required to assist outside of working hours
- Knowledge of company IT and cyber security landscape, including systemic understanding of key business linkages and dependencies
- Is aware of and responsive to internal and external events and influences on the technical landscape
- Ability to research technology-related concepts, trends, and best practices, and apply findings
- Appropriately derives and organises the essence of information to draw solid conclusions
- Looks beyond symptoms to uncover root causes of problems to be solved
- Synthesises data from different sources to identify trends
- Presents problem analysis and a recommended solution rather than just identifying and describing the problem itself
- Proactively approaches others to obtain missing information
- Demonstrates a results-oriented mindset in planning and implementing activities/projects
- Clearly defines objectives and translates them into workable activities
- Monitors and tracks progress to ensure delivery of all planned commitments, and keeps the appropriate people informed
- Prepares written reports and briefs and communicates ideas clearly
- Speaks fluently in team meetings when presenting information
- Manages existing partnerships within established agreements or contracts; negotiates adjustments when mutually beneficial to do so
- Genuinely cultivates personal bonds with colleagues to enhance performance throughout the organisation
- Adjusts to work effectively within new work structures, processes, requirements, or cultures
- Demonstrates resourcefulness in acquiring necessary knowledge, skills, and competencies to adapt to change
Desired Qualifications
- Python and JavaScript are preferred
- Relevant qualifications and certifications such as SANS (SEC 540 or SEC 534), GIAC GCSA or the AWS Developer Associate certification is highly advantageous
- Practical experience with the MITRE ATT&CK framework is advantageous
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.