Principal Information Security Engineer - Devsecops

About the Role
Our client, a cutting-edge software development company, is seeking a Principal Information Security Engineer to champion DevSecOps principles within their engineering organization. This is a fully remote, high-impact role focused on integrating security seamlessly into the software development lifecycle (SDLC). You will be responsible for designing and implementing automated security controls, tools, and processes throughout the CI/CD pipeline, enabling faster and more secure software delivery. This is a unique opportunity to shape the future of secure software development in a remote-first, collaborative environment. This role is based in Kimberley, Northern Cape, but operates entirely remotely.Key Responsibilities
Design, implement, and maintain security tools and automation within the CI/CD pipeline (e.G., SAST, DAST, SCA, IAST).Develop and enforce secure coding standards and best practices across all engineering teams.Collaborate closely with development, QA, and operations teams to embed security throughout the SDLC.Implement and manage infrastructure as code (IaC) security, container security, and cloud security controls.Automate security testing, vulnerability scanning, and compliance checks within development workflows.Develop and maintain security documentation, architectural diagrams, and operational playbooks.Provide security guidance and training to development teams.Conduct security reviews of application architectures and infrastructure designs.Stay abreast of emerging security threats and technologies relevant to DevSecOps and cloud-native applications.Requirements
Master's degree in Computer Science, Cybersecurity, or a related field, or equivalent extensive experience.8+ years of experience in software development, security engineering, or DevSecOps.Proven experience integrating security tools and automation into CI/CD pipelines (e.G., Jenkins, GitLab CI, Azure DevOps).Deep understanding of secure coding principles, OWASP Top 10, and common vulnerability types.Hands-on experience with cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).Proficiency in scripting languages (Python, Go, Bash) and IaC tools (Terraform, Ansible).Strong knowledge of application security testing methodologies (SAST, DAST, SCA).Excellent communication, collaboration, and problem-solving skills.Relevant certifications such as CISSP, CSSLP, or cloud security certifications are highly valued.Benefits
Highly competitive annual salary up to ZAR .Comprehensive global health coverage.Generous stock options and performance bonuses.Significant budget for professional development, conferences, and training.Fully remote work environment with flexible scheduling.Opportunity to lead and innovate in the field of DevSecOps for a forward-thinking company.
#J-18808-Ljbffr