DevSecOps Engineer

About the role

Old Mutual is looking for a DevSecOps Engineer to embed security into its DevOps processes across the software development lifecycle. The role suits a seasoned professional with deep expertise in DevOps, security and automation, who will mentor team members and work with stakeholders to strengthen the organisation's security posture.

Key responsibilities

• Develop and optimise security automation scripts and tools in CI/CD pipelines and champion automated security testing.
• Oversee vulnerability scanning and assessment, and lead incident response and security event analysis.
• Lead the design, implementation and maintenance of security monitoring solutions.
• Enforce security best practices in Infrastructure as Code and set secure configuration baselines for infrastructure.
• Establish security governance policies and compliance standards.
• Collaborate with cross-functional teams and mentor junior and intermediate DevSecOps engineers.

Required profile

• Bachelor's degree in Computer Science, Information Security or a related discipline, or equivalent practical experience.
• 5+ years of experience in DevOps, cloud engineering, cybersecurity or platform security.
• Proven track record leading DevSecOps initiatives and embedding security in enterprise delivery pipelines.
• Strong practical experience securing AWS and Azure environments.

Required skills

• Advanced understanding of CI/CD, IaC, container security and automated vulnerability management.
• Expert scripting and automation with Python and/or Bash.
• Knowledge of IAM, encryption, secrets management, secure configurations and incident response.
• Experience with Linux, Docker, ECS/Fargate, cloud monitoring and production operations.
• Working knowledge of SQL, REST APIs and enterprise integration troubleshooting.
• Advantageous: AWS, Azure, DevSecOps or advanced security certifications.