Principal Information Security Engineer - DevSecOps

About the Role

Our client, a cutting-edge software development company, is seeking a Principal Information Security Engineer to champion DevSecOps principles within their engineering organization. This is a fully remote, high-impact role focused on integrating security seamlessly into the software development lifecycle (SDLC). You will be responsible for designing and implementing automated security controls, tools, and processes throughout the CI/CD pipeline, enabling faster and more secure software delivery. This is a unique opportunity to shape the future of secure software development in a remote-first, collaborative environment. This role is based in Kimberley, Northern Cape , but operates entirely remotely.

Key Responsibilities

• Design, implement, and maintain security tools and automation within the CI/CD pipeline (e.g., SAST, DAST, SCA, IAST).
• Develop and enforce secure coding standards and best practices across all engineering teams.
• Collaborate closely with development, QA, and operations teams to embed security throughout the SDLC.
• Implement and manage infrastructure as code (IaC) security, container security, and cloud security controls.
• Automate security testing, vulnerability scanning, and compliance checks within development workflows.
• Develop and maintain security documentation, architectural diagrams, and operational playbooks.
• Provide security guidance and training to development teams.
• Conduct security reviews of application architectures and infrastructure designs.
• Stay abreast of emerging security threats and technologies relevant to DevSecOps and cloud-native applications.

Requirements

• Master's degree in Computer Science, Cybersecurity, or a related field, or equivalent extensive experience.
• 8+ years of experience in software development, security engineering, or DevSecOps.
• Proven experience integrating security tools and automation into CI/CD pipelines (e.g., Jenkins, GitLab CI, Azure DevOps).
• Deep understanding of secure coding principles, OWASP Top 10, and common vulnerability types.
• Hands-on experience with cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes).
• Proficiency in scripting languages (Python, Go, Bash) and IaC tools (Terraform, Ansible).
• Strong knowledge of application security testing methodologies (SAST, DAST, SCA).
• Excellent communication, collaboration, and problem-solving skills.
• Relevant certifications such as CISSP, CSSLP, or cloud security certifications are highly valued.

Benefits

• Highly competitive annual salary up to ZAR .
• Comprehensive global health coverage.
• Generous stock options and performance bonuses.
• Significant budget for professional development, conferences, and training.
• Fully remote work environment with flexible scheduling.
• Opportunity to lead and innovate in the field of DevSecOps for a forward-thinking company.