DevOps Engineer at IndSAfri

About the Role:

• We are seeking a highly skilled and motivated DevSecOps Engineer to join our client at a Bank. As a DevSecOps Engineer, you will play a critical role in integrating security practices into our DevOps processes, ensuring the security and compliance of our systems and applications. This is a permanent position based in Sandton.

Key Responsibilities:

• Collaborate with development, operations, and security teams to integrate security into the DevOps lifecycle.
• Implement and manage security tools and technologies to enhance the security posture of our applications and infrastructure.
• Conduct security assessments, vulnerability scans, and penetration testing to identify and mitigate security risks.
• Develop and maintain security policies, procedures, and best practices.
• Automate security processes and workflows to improve efficiency and reduce manual intervention.
• Monitor and respond to security incidents and alerts, conducting root cause analysis and implementing corrective actions.
• Stay up-to-date with the latest security trends, threats, and technologies to ensure our systems are protected against emerging risks.
• Provide training and guidance to development and operations teams on secure coding practices and security best practices.

Qualifications:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Proven experience as a DevSecOps Engineer or in a similar role.
• Strong understanding of DevOps principles and practices.
• Experience with security tools and technologies such as SIEM, IDS/IPS, vulnerability scanners, and WAFs.
• Proficiency in scripting and automation using languages such as Python, Bash, or PowerShell.
• Knowledge of cloud security best practices and experience with cloud platforms such as AWS, Azure, or GCP.
• Familiarity with containerization and orchestration tools like Docker and Kubernetes.
• Excellent problem-solving skills and attention to detail.
• Strong communication and collaboration skills.

Preferred Qualifications:

• Relevant certifications such as CISSP, CISM, CEH, or AWS Certified Security.
• Experience with regulatory compliance frameworks such as PCI-DSS, GDPR, or ISO 27001.
• Knowledge of secure software development practices and secure coding standards.