Specialist: DevSecOps

When it comes to putting people first, we're number 1.

The number 1 Top Employer in South Africa.

Certified by the Top Employer Institute 2026.

The primary purpose of the role is the implementation and continuous improvement of the Dev Sec Ops  programme within Vodacom South Africa, ensuring alignment with the Cyber Health and Adaptive Risk Method (CHARM) control 14.2.5-A Dev Sec Ops . In this role you will work within a team of Dev Sec Ops  professionals and collaborate with Secure by Design, Security and Enterprise Architecture and Dev Ops Teams to:

• Implement, operation and ongoing improvement of the Dev Sec Ops  Security Chapter and Champions model across technology Development teams to create the cultural shift that will underpin the Dev Sec Ops  capability.
• Implement automated scanning tools including SAST, SCA, DAST, and secret scanning and other more advanced security scanning capabilities.
• Establish and maintain Appsec vulnerability management processes, ensuring critical vulnerabilities are identified, reported, evaluated, prioritized and remediated, to continuously improve the Vodacom's application security posture.
• Assist with the standardization and security approval of CI/CD tool chains, ensuring all development tools are compliant with policy, SPDA approved and integrated with ASPM (Application security Posture Management) tool and Dev Sec Ops  processes.

This role will involve working with Busines unit, Cyber and IT stakeholders in Vodacom South Africa to implement and operate Cyber Security Dev Sec Ops  CHARM requirements – Some of these responsibilities may extend to collaboration with Group Cyber Security and other operating companies to ensure that cyber security controls are consistently applied across markets.

• Implementation and ongoing management and improvement of the Security Chapter and Champions programme across technology teams.
• Ensure every agile Dev Ops/Dev Sec Ops  team has appointed Chapter Leads and Security Champions.
• Collaborate with Dev Sec Ops  Specialists and provide guidance to Cyber Security Officers to ensure they support Chapter Leads and Champions effectively.
• Facilitate completion and ongoing re-evaluation of Dev Sec Ops  Maturity across Dev Sec Ops  teams.
• Drive completion of Dev Sec Ops  Learning Pathway for all Chapter Leads and Champions.
• Facilitate monthly Chapter meetings and feedback sessions to track progress and maturity.
• Promote a culture of security awareness and collaboration across teams.
• Track and report on the effectiveness of the Champions model and identify areas for improvement.
• Support the creation and maintenance of training materials and structured learning paths.

• Drive the migration to a standardised CI/CD pipeline using an Enterprise selected and security approved toolset in collaboration with Enterprise Architecture and Platform Engineering.
• Discover, Identify and record all Dev Sec Ops  tooling being used by Development Teams across the organisation.
• Maintain an inventory of tools used across teams and ensure compliance with security policies.
• Collaborate with Platform Engineering, Enterprise Architecture, Cybersecurity and Development Teams to embed security controls in the pipeline and design secure SDLC patterns.
• Support the implementation of SPDA-approved software applications and extensions.
• Identified and Discovered Dev Sec Ops  tooling should be integrated with ASPM tooling and channelled through SPDA, where applicable or retired for teams to move to approved tooling.
• Ensure security assessments are passed to and conducted by the Secure by Design on CI/CD pipelines to meet CHARM 14.2.5-A requirements.
• Provide guidance on secure tool usage and integration across development environments.

• Assist with the implementation of automated scanning tools including SAST, SCA, DAST, and secret scanning.
• Support the rollout of scanning capabilities and ensure coverage across all teams.
• Collaborate with teams to define and implement vulnerability management processes.
• Develop and maintain real-time/near real-time vulnerability dashboards.
• Work with Chapter Leads and Champions to continuously improve security posture and maturity.
• Align vulnerability remediation with Dev Sec Ops  maturity to target a state where critical and high vulnerabilities are remediated prior to code release into…