Skip to content

Open nowFirst seen 2 days ago

CYBER SECURITY SPECIALIST: DevSecOps, IT CYBER SECURITY

Boardroom Appointments3,354 open roles

Where
Cape Town, WC, South Africa
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCYBER SECURITY SPECIALIST: DevSecOps, IT CYBER SECURITYBoardroom Appointments · Cape Town, WC, South Africa
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Boardroom Appointments's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.8% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.8%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: first seen 2 days ago

The posting

Job Description

  • Secure the development of products - integrate security practices as early as possible in the lifecycle of software development under the guiding principles of shift left and security by default.
  • Prescribe, maintain and enhance cool toolsets manage the relevant tools required for mature product security that include pen testing, secure coding, and source code analysis. Investigate new approaches, technology, and automation to challenge traditional thinking and raise the level of security.
  • Verify the security of internally and externally developed applications and services during and after development and deployment. Actively participate in the SDLC though guidance, education, input, and facilitation.
  • Perform threat modelling enhance and optimize infrastructure, platform, application, and mobile security by identifying threats, vulnerabilities, and associated countermeasures.
  • Provide AppSec training and raise the awareness banner high create and manage learning and reference materials and exercises.
  • Define and implement documentation and standards on application security processes, tooling, and other resources to assist collaboration with the various stakeholder across company.
  • Provide expert guidance on, and where relevant maintain and enhance the toolsets required for mature application security covering secure coding, source code analysis and vulnerability management.
  • Investigate new approaches, technologies, and automation to mature AppSec.

Additional Responsibilities:

  • Collaborate with the broader SecOps Team to drive and support various operational and strategic initiatives.
  • Champion or co-champion internal security solutions and/or processes.

Minimum Requirements

Mandatory

  • 3-year IT or NQF aligned Qualification
  • 5 years relevant experience in cyber security, with at least 3 years in a DevOps / DevSecOps capacity.
  • Hands on practical experience in DevOps / DevSecOps and the ability to integrate security into the CI/CD processes
  • Hands on practical experience in application security testing.
  • Extensive knowledge of DevSecOps principles, practices, and tools, including containerization, orchestration, and automation.
  • Experience in securing CI/CD pipelines on Cloud platforms, specifically AWS and Azure.
  • Experience with infrastructure-as-code tools (e.g., Terraform).
  • Basic scripting experience and skills. Python and JavaScript are preferred.
  • Solid experience in Secure Code Development practices and tools, e.g., SonarCube.
  • Good understanding of common security libraries, frameworks, and tools.
  • Ability to explain the common security flaws as well as potential ways to address them.
  • Deep technical skills and ability to automate manual processes.
  • Bloodhound approach to security.
  • Relentless pursuit of threat identification and remediation.
  • Relevant research and translation into defence.
  • Very good people skills to engage with the various stakeholders across the business, while ensuring that professionalism is maintained.
  • Ability to engage with and contribute to the Information Security community.

Additional Criteria

  • Software development experience.
  • Relevant qualifications and certifications such as SANS (SEC 540 or SEC 534), GIAC GCSA or the AWS Developer Associate certification is highly advantageous.
  • Practical experience with the MITRE ATT&CK framework is advantageous.
  • May be required to assist outside of working hours.
  • Knowledge of company IT and cyber security landscape, including systemic understanding of key business linkages and dependencies
  • Is aware of and responsive to internal and external events and influences on the technical landscape
  • Ability to research technology-related concepts, trends, and best practices, and apply findings
  • Appropriately derives and organises the essence of information to draw solid conclusions
  • Looks beyond symptoms to uncover root causes of problems to be solved
  • Synthesises data from different sources to identify trends
  • Presents problem analysis and a recommended solution rather than just identifying and describing the problem itself
  • Proactively approaches others to obtain missing information
  • Demonstrates a results-oriented mindset in planning and implementing activities/projects
  • Clearly defines objectives and translates them into workable activities
  • Monitors and tracks progress to ensure delivery of all planned commitments, and keeps the appropriate people informed
  • Prepares written reports and briefs and communicates ideas clearly
  • Speaks fluently in team meetings when presenting information
  • Manages existing partnerships within established agreements or contracts; negotiates adjustments when mutually beneficial to do so
  • Genuinely cultivates personal bonds with colleagues to enhance performance throughout the organisation
  • Adjusts to work effectively within new work structures, processes, requirements, or cultures
  • Demonstrates resourcefulness in acquiring necessary knowledge, skills, and competencies to adapt to change
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Boardroom Appointments's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Boardroom Appointments's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Boardroom Appointments's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.