Senior Cyber Security Specialist: Devsecops, Its - Cape Town, South Africa - Woolworths

Woolworths

Verified Company

Cape Town, South Africa

1 week ago

Posted by:

Thabo Mthembu

beBee Recruiter

Description

Advert reference:
woolw_000641

Advert status:
Online

-
Position Summary

Industry:
IT & Internet

Job category:
Others: IT and Telecommunication

Location:
Cape Town

Contract:
Permanent

Remuneration:
Market-related

Introduction

We are searching for an energetic, output-driven DevSecOps Ninja to support the execution of the cyber security strategy and roadmap with a primary focus on integration of security practices into our DevOps delivery models.

We are looking for someone that will help drive a modern security culture where development and operations are enabled through process and tooling for delivering secure software and solutions for Woolworths.

This is a permanent position based at the Head Office in Cape Town City Centre.

Job description

Secure the development of products integrate security practices as early as possible in the lifecycle of software development under the guiding principles of 'shift left' and 'security by default'.
Prescribe, maintain and enhance cool toolsets manage the relevant tools required for mature product security that include pen testing, secure coding, and source code analysis. Investigate new approaches, technology, and automation to challenge traditional thinking and raise the level of security.
Provide AppSec training and raise the awareness banner high create and manage learning and reference materials and exercises.
Investigate new approaches, technologies, and automation to mature AppSec.

Additional Responsibilities

Collaborate with the broader SecOps Team to drive and support various operational and strategic initiatives.
Champion or cochampion internal security solutions and/or processes.

Minimum requirements

_Mandatory_

3year IT or NQF aligned Qualification
5 years relevant experience in cyber security, with at least 3 years in a DevOps / DevSecOps capacity.
Hands on practical experience in DevOps / DevSecOps and the ability to integrate security into the CI/CD processes
Extensive knowledge of DevSecOps principles, practices, and tools, including containerization, orchestration, and automation.
Experience in securing CI/CD pipelines on Cloud platforms, specifically AWS and Azure.
Experience with infrastructureascode tools (e.g., Terraform).
Basic scripting experience and skills. Python and JavaScript are preferred.
Solid experience in Secure Code Development practices and tools, e.g., SonarCube.
Good understanding of common security libraries, frameworks, and tools.
Ability to explain the common security flaws as well as potential ways to address them.
Deep technical skills and ability to automate manual processes.
Bloodhound approach to security.
Relentless pursuit of threat identification and remediation.
Relevant research and translation into defence.
Very good people skills to engage with the various stakeholders across the business, while ensuring that professionalism is maintained.
Ability to engage with and contribute to the Information Security community.

**_
Additional Criteria_**- Software development experience.

Relevant qualifications and certifications such as SANS (SEC 540 or SEC 534), GIAC GCSA or the AWS Developer Associate certification is highly advantageous.
Practical experience with the MITRE ATT&CK framework is advantageous.
May be required to assist outside of working hours.
Knowledge of Woolworths IT and cyber security landscape, including systemic understanding of key business linkages and dependencies
Is aware of and responsive to internal and external events and influences on the technical landscape
Appropriately derives and organises the essence of information to draw solid conclusions
Looks beyond symptoms to uncover root causes of problems to be solved
Synthesises data from different sources to identify trends
Presents problem analysis and a recommended solution rather than just identifying and describing the problem itself
Proactively approaches others to obtain missing information
Demonstrates a resultsoriented mindset in planning and implementing activities/projects
Clearly defines objectives and translates them into workable activities
Monitors and tracks progress to ensure delivery of all planned commitments, and keeps the appropriate people informed
Prepares written reports and briefs and communicates ideas clearly
Speaks fluently in team meetings when presenting information
Manages existing partnerships within established agreements or contracts; negotiates adjustments when mutually beneficial to do so
Genuinely cultivates personal bonds with colleagues to enhance performance throughout the organisation
Adjusts to work effectively within new work structures, processes, requirements, or cultures
Demonstrates resourcefulness in acquiring necessary knowledge, skills, and competencies to adapt to change

**Woolworths is an equal employment opportunity company that is committed to incl