Skip to content

Open nowFirst seen 37 hours ago

Senior Cloud Security & DevSecOps Manager

Optimal Growth Technologies85 open roles

Where
Johannesburg, South Africa
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Cloud Security & DevSecOps ManagerOptimal Growth Technologies · Johannesburg, South Africa
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Optimal Growth Technologies's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.9% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.1%1 day
  2. 4.4%3 days
  3. 11.9%7 days
  4. 18.6%14 days
  5. 35.6%30 days
  6. 45.1%60 days
This job: first seen 37 hours ago

The posting

Job Title: DevSecOps Manager

Location: Midrand - Hybrid

Duration: 12 months

Role Summary

  • This senior role drives secure, automated, and compliant cloud-native delivery while managing monitoring/alerting, penetration testing programs, vulnerability management, and broader cybersecurity initiatives.
  • You will lead a team of DevSecOps engineers, foster a security by design culture, and enable the business to innovate rapidly in a regulated South African and global context

Key Responsibilities

DevOps

  • Provision and manage cloud infrastructure as code (Terraform, Ansible,

CloudFormation) on AWS, Azure, or GCP.

  • Implement containerization and orchestration (Docker, Kubernetes, Helm) for

consistent environments.

  • Automate repetitive tasks, reduce toil, and improve developer experience through self

service tools

  • Collaborate with software developers, QA, and security teams to embed DevOps

practices (shift-left security, automated testing).

  • Perform root-cause analysis on production issues, implement fixes, and drive

continuous improvement.

  • Participate in on-call rotations and incident response.

Leadership & Team Management

  • Lead, mentor, and develop a high-performing team of DevOps, SRE, and security

engineers.

  • Mentor junior engineers and promote a culture of automation and shared ownership
  • Champion DevSecOps practices and culture across Development, Operations, Security, and Compliance teams.
  • Define and track KPIs: vulnerability remediation time, security gate pass rate, MTTR, deployment frequency, and alert reduction.

AWS Cloud Environment Management & Security

  • Design, implement, and govern secure AWS architectures (multi-account landing

zones via Control Tower, VPCs, EKS, Lambda, RDS, etc.) using Infrastructure as

Code (Terraform, AWS CloudFormation, CDK).

  • Enforce least-privilege IAM, encryption (KMS), secrets management, network

security, and data sovereignty for POPIA compliance.

  • Leverage AWS-native services: Amazon Inspector, GuardDuty, Security Hub, Config,

IAM Access Analyzer, and AWS Security Agent for automated security.

  • Build and Secure CI/CD Pipelines & Automation
  • Build and evolve secure CI/CD pipelines (AWS CodePipeline, GitLab), optimizing

workflows to automate testing, builds, and deployments with security gates (SAST,

  • DAST, SCA, IaC, secret, and container scanning)

Monitoring, Alerting & Observability

  • Architect comprehensive monitoring and alerting using AWS CloudWatch, GuardDuty,

X-Ray, EventBridge, and SIEM integrations.

  • Design intelligent alerting with automated routing, escalation, noise reduction, and

rapid incident response processes (critical for Cybercrimes Act obligations).

  • Set up monitoring, logging, and alerting to maintain high availability and performance.
  • Ensure 24/7 visibility into security posture, performance, and compliance.

Cybersecurity, Penetration Testing & Risk Management

  • Lead and coordinate regular penetration testing
  • Oversee vulnerability management: scanning, risk-based prioritization, remediation

tracking, and exception processes.

  • Conduct threat modelling, runtime protection, supply-chain security, zero-trust

implementation, and incident response.

  • Ensure appropriate, reasonable technical and organisational measures for POPIA

Condition 7 (Security Safeguards), including encryption, access controls, logging,

and regular testing.

Compliance, Governance & Continuous Improvement

  • Support audits and evidence collection
  • Collaborate on release management with security go/no-go decisions.
  • Stay current with AWS security updates, emerging threats, and South African

regulatory changes.

  • Drive maturity of DevSecOps practices and conduct regular AWS Well-Architected
  • Framework reviews (Security Pillar).

Qualifications & Experience

  • Education: Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering

Experience

  • 8–10+ years in DevOps, Cloud Engineering, or Cybersecurity.
  • 3–5+ years in technical leadership or management roles.
  • Strong hands-on AWS experience
  • Proven track record in regulated environments with POPIA/GDPR compliance.

Certifications

  • AWS Certified Security – Specialty or AWS Certified DevOps Engineer – Professional.
  • CISSP, CISM, CCSP, or CISA.

Essential Skills & Competencies

Technical:

  • Deep expertise in AWS.
  • Proficiency with security tools (Inspector, GuardDuty, SAST/DAST like SonarQube,
  • SIEM).
  • Proficiency in at least one scripting language (Python, Bash, PowerShell).
  • Strong experience with Linux, networking, and Git.
  • Hands-on expertise with CI/CD, IaC, Docker/Kubernetes, and at least one major
  • cloud platform (AWS/Azure/GCP certifications preferred).
  • Penetration testing methodologies and vulnerability management.
  • Knowledge of monitoring, observability, and infrastructure security.

Leadership & Soft Skills:

  • Excellent stakeholder communication (technical to executive level).
  • Ability to drive cultural change in hybrid/fast-paced environments.
  • Strong problem-solving, metrics-driven approach, and collaboration skills.
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Optimal Growth Technologies's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Optimal Growth Technologies's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Optimal Growth Technologies's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.