Senior Cloud Security & DevSecOps Manager

Senior Cloud Security & Dev Sec Ops  Manager About the job Senior Cloud Security & Dev Sec Ops  Manager

Job Title:
Dev Sec Ops  Manager

Location:
Midrand - Hybrid

Duration: 12 months

Role Summary

• This senior role drives secure, automated, and compliant cloud-native delivery while managing monitoring/alerting, penetration testing programs, vulnerability management, and broader cybersecurity initiatives.
• You will lead a team of Dev Sec Ops  engineers, foster a security by design culture, and enable the business to innovate rapidly in a regulated South African and global context

Key Responsibilities

Dev Ops

• Provision and manage cloud infrastructure as code (Terraform, Ansible,

Cloud Formation) on AWS, Azure, or GCP.

• Implement containerization and orchestration (Docker, Kubernetes, Helm) for
• Automate repetitive tasks, reduce toil, and improve developer experience through self

service tools

• Collaborate with software developers, QA, and security teams to embed Dev Ops

practices (shift-left security, automated testing).

• Perform root-cause analysis on production issues, implement fixes, and drive
• Participate in on-call rotations and incident response.

Leadership & Team Management

• Lead, mentor, and develop a high-performing team of Dev Ops, SRE, and security
• Mentor junior engineers and promote a culture of automation and shared ownership
• Champion Dev Sec Ops  practices and culture across Development, Operations, Security, and Compliance teams.
• Define and track KPIs: vulnerability remediation time, security gate pass rate, MTTR, deployment frequency, and alert reduction.

AWS Cloud Environment Management & Security

• Design, implement, and govern secure AWS architectures (multi-account landing

Code (Terraform, AWS Cloud Formation, CDK).

• Enforce least-privilege IAM, encryption (KMS), secrets management, network

security, and data sovereignty for POPIA compliance.

• Leverage AWS-native services:
  Amazon Inspector, Guard Duty, Security Hub, Config,

IAM Access Analyzer, and AWS Security Agent for automated security.

• Build and Secure CI/CD Pipelines & Automation
• Build and evolve secure CI/CD pipelines (AWS Code Pipeline, Git Lab), optimizing

workflows to automate testing, builds, and deployments with security gates (SAST,

• DAST, SCA, IaC, secret, and container scanning)

Monitoring, Alerting & Observability

• Architect comprehensive monitoring and alerting using AWS Cloud Watch, Guard Duty,

X-Ray, Event Bridge, and SIEM integrations.

• Design intelligent alerting with automated routing, escalation, noise reduction, and

rapid incident response processes (critical for Cybercrimes Act obligations).

• Set up monitoring, logging, and alerting to maintain high availability and performance.
• Ensure 24/7 visibility into security posture, performance, and compliance.
• Lead and coordinate regular penetration testing
• Oversee vulnerability management: scanning, risk-based prioritization, remediation

tracking, and exception processes.

• Conduct threat modelling, runtime protection, supply-chain security, zero-trust

implementation, and incident response.

• Ensure appropriate, reasonable technical and organisational measures for POPIA

Condition 7 (Security Safeguards), including encryption, access controls, logging,

and regular testing.

Compliance, Governance & Continuous Improvement

• Support audits and evidence collection
• Collaborate on release management with security go/no-go decisions.
• Stay current with AWS security updates, emerging threats, and South African

regulatory changes.

• Drive maturity of Dev Sec Ops  practices and conduct regular AWS Well-Architected
• Framework reviews (Security Pillar).

Qualifications & Experience

• Education:
  
  Bachelor's degree in Computer Science, Information Technology, Cybersecurity, Engineering

Experience

• 8–10+ years in Dev Ops, Cloud Engineering, or…