{"id":2423352,"url":"https://alion.io/job/scrums-com-principal-devsecops-consultant","title":"Principal DevSecOps Consultant","company":{"id":57427,"name":"Scrums.com","domain":"scrums.com","url":"https://alion.io/company/scrums-com","size_band":"51-200","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Schema","truth_index":{"grade":"A","score":95,"open_postings":36,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":155,"computed_at":"2026-10-15T05:46:00Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"contractor","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":["ZA"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":30000,"max_usd":76000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":623},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Kubernetes","optional":false},{"name":"Least Privilege","optional":false},{"name":"SOC 2","optional":false}],"status":"live","first_seen_at":"2026-10-13T04:04:05Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-15T03:33:25Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"This is a rare opportunity to set the engineering standard for a regulated payments organisation from the ground up. The position leads an independent DevSecOps maturity assessment across multiple engineering teams, then shapes and guides the phased improvement roadmap that follows. Maturity currently varies significantly between teams, and the goal is not to adopt what exists today but to define a new, higher standard. Your assessment will be the first deliverable of the engagement and the baseline against which all future progress is measured, giving you real influence with engineering leadership, the CISO and the risk committee. If you enjoy evidence-based diagnosis, translating findings into practical change, and staying close enough to see that change stick, this role offers both strategic visibility and lasting impact.\nResponsibilities\nConduct an independent, team-by-team assessment of CI/CD, cloud and Kubernetes maturity, evaluating each team in its own context rather than against a single blanket standard\nBenchmark engineering performance using the DORA and SPACE frameworks, establishing an evidence-based baseline drawn from real delivery data rather than self-reported measures\nPerform root-cause analysis across incident history to identify the constraints that genuinely slow delivery and affect reliability\nEvaluate security practice across the full software development lifecycle, including static and dynamic application security testing, dependency and container scanning, secrets management, access control and release governance\nDefine the maturity baseline and success criteria jointly with stakeholders, as these are intentionally undefined at the outset of the engagement\nProduce a prioritised, phased improvement roadmap with clear sequencing, effort estimates and dependencies, rather than a standalone list of recommendations\nAdvise on governance for AI-assisted engineering, covering tool permissions, least-privilege credentials, human approval gates and audit trails\nMap findings and recommendations to relevant control frameworks to support compliance and audit readiness\nPresent findings and progress to senior engineering leadership, the CISO and the risk committee, ensuring conclusions withstand scrutiny from both technical and risk perspectives\nCoach engineering leads through adoption of the new standard, building internal capability so improvements are sustained after the engagement ends\nTrack roadmap adoption and adjust priorities as teams progress\nExperience and education\nMust-Have\n10+ years of experience in software engineering, with at least 5 years in DevSecOps, platform security or engineering effectiveness\nDemonstrable experience running maturity assessments or engineering health checks across multiple teams, with published or referenceable outputs (primary screening criterion)\nStrong hands-on knowledge of CI/CD pipeline security, AWS cloud security and Kubernetes security\nPractical experience applying DORA metrics to measure and improve delivery performance\nExperience working in financial services or another regulated sector\nConfidence presenting findings and recommendations to a CISO and risk committee\nBachelor’s degree in Computer Science, Engineering or a related field, or equivalent demonstrable experience\nAdvantageous\nExperience applying the SPACE framework to engineering productivity\n\nControl mapping experience against SOC 2 Type II and ISO/IEC 27001\n\nExposure to AI agent governance and secure use of AI-assisted engineering tools\n\nThreat modelling experience\n\nWorking knowledge of POPIA and South African data protection requirements\n\nSecurity certification such as CISSP, CISM or AWS Certified Security Specialty","description_format":"text","description_chars":3703,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"South Africa","iso":"ZA","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","IT Outsourcing & Dedicated Teams","Custom Software Development"],"lifecycle":[{"event":"open","at":"2026-10-13T06:19:39Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":155,"reasons":["conf:2","velocity","win:early"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/scrums-com-principal-devsecops-consultant","json_url":"https://alion.io/job/scrums-com-principal-devsecops-consultant.json","meta":{"generated_at":"2026-10-15T07:27:07Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11078,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":57427},"rest":"https://alion.io/mcp/rest/get_company?id=57427"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fscrums-com-principal-devsecops-consultant"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fscrums-com-principal-devsecops-consultant"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fscrums-com-principal-devsecops-consultant"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/scrums-com-principal-devsecops-consultant\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fscrums-com-principal-devsecops-consultant"}]}