Security DevOps Specialist at Discovery Limited

Key Purpose

• The Security DevOps Specialist role at Discovery Limited is responsible for designing, developing and maintaining secure software artefacts, automated security pipelines and security tooling across the software development lifecycle. The role integrates security practices into CI/CD workflows, develops and manages security automation code, and ensures the security of containerised and cloud-native environments. Working within the Information Security Services team, the role builds and maintains security capabilities that enable secure software delivery while protecting Discovery's digital assets and development infrastructure.

Areas of responsibility may include but not limited

• Design, implement and maintain secure CI/CD pipelines with integrated security controls
• Implement security-as-code practices and automate security policy enforcement
• Collaborate with development teams to integrate security testing into SDLC
• Manage container security including image scanning and Kubernetes security policies
• Configure secrets management solutions and secure credential handling
• Develop infrastructure-as-code templates with embedded security controls
• Monitor and respond to security alerts from automated scanning tools
• Conduct security reviews of code and infrastructure configurations
• Create security documentation and operational procedures
• Support incident response for application and infrastructure security events
• Implement cloud security controls across AWS, Azure or GCP environments
• Provide security training to development teams on secure coding practices
• Maintain compliance with security frameworks and audit requirements

Personal Attributes and Skills

• Excellent knowledge of technology environments 
• The ability to articulate security in non-technical business impact terms  
• Business Writing Skills, Presentation and Facilitation Skills 
• Customer Service Orientation, Result Orientation, Negotiation skills 
• Personal organisation and time management skills 
• Time and Task Delivery Management 
• Professional Communication (written, verbal/presenting and listening) 
• Interpersonal skills - Ability to build relationships with people from all different backgrounds and at different job levels 

Qualifications & Experience

Essential  

• IT-related Diploma or Degree
• Relevant experience in DevOps/security
• CI/CD tools experience
• Container/Kubernetes knowledge
• Python/Bash scripting
• 5+ years Senior DevOps experience.
• Experience with container platforms.
• Experience with cloud platforms (AWS, Azure and GCP).

Advantageous  

• Application Security.
• Security certifications (Security+, CEH)