{"id":2481437,"url":"https://alion.io/job/vodafone-group-specialist-devsecops","title":"Specialist: DevSecOps","company":{"id":51587,"name":"Vodafone Group","domain":"vodafone.com","url":"https://alion.io/company/vodafone-group","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Eightfold","truth_index":{"grade":"C","score":60,"open_postings":479,"ghost_share":0.422,"stale_share":0.263,"repost_share":0.572,"time_to_fill_p50_days":53,"computed_at":"2026-10-24T06:02:35Z"}},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Johannesburg, South Africa"],"countries":["ZA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":23000,"max_usd":55000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":774},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Ansible","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Chef","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"Docker","optional":false},{"name":"GCP","optional":false},{"name":"GitLab","optional":false},{"name":"Java","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"PCI DSS","optional":false},{"name":"Perl","optional":false},{"name":"PHP","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Puppet","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"Windows","optional":false}],"status":"closed","first_seen_at":"2026-10-08T06:18:59Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-22T12:46:20Z","board_verified":false,"closed_at":"2026-10-22T12:46:20Z","days_open":14,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":14},"description":"When it comes to putting people first, we're number 1.\nThe number 1 Top Employer in South Africa.\nCertified by the Top Employer Institute 2026.\nRole Purpose/Business Unit:\nThe primary purpose of the role is the implementation and continuous improvement of the DevSecOps programme within Vodacom South Africa, ensuring alignment with the Cyber Health and Adaptive Risk Method (CHARM) control 14.2.5-A DevSecOps. In this role you will work within a team of DevSecOps professionals and collaborate with Secure by Design, Security and Enterprise Architecture and DevOps Teams to:\nImplement, operation and ongoing improvement of the DevSecOps Security Chapter and Champions model across technology Development teams to create the cultural shift that will underpin the DevSecOps capability.\nImplement automated scanning tools including SAST, SCA, DAST, and secret scanning and other more advanced security scanning capabilities.\nEstablish and maintain Appsec vulnerability management processes, ensuring critical vulnerabilities are identified, reported, evaluated, prioritized and remediated, to continuously improve the Vodacom’s application security posture.\nAssist with the standardization and security approval of CI/CD toolchains, ensuring all development tools are compliant with policy, SPDA approved and integrated with ASPM (Application security Posture Management) tool and DevSecOps processes.\nThis role will involve working with Busines unit, Cyber and IT stakeholders in Vodacom South Africa to implement and operate Cyber Security DevSecOps CHARM requirements - Some of these responsibilities may extend to collaboration with Group Cyber Security and other operating companies to ensure that cyber security controls are consistently applied across markets.\nYour responsibilities will include:\nCulture - Security Champions Programme\nImplementation and ongoing management and improvement of the Security Chapter and Champions programme across technology teams.\nEnsure every agile DevOps/DevSecOps team has appointed Chapter Leads and Security Champions.\nCollaborate with DevSecOps Specialists and provide guidance to Cyber Security Officers to ensure they support Chapter Leads and Champions effectively.\nFacilitate completion and ongoing re-evaluation of DevSecOps Maturity across DevSecOps teams.\nDrive completion of DevSecOps Learning Pathway for all Chapter Leads and Champions.\nFacilitate monthly Chapter meetings and feedback sessions to track progress and maturity.\nPromote a culture of security awareness and collaboration across teams.\nTrack and report on the effectiveness of the Champions model and identify areas for improvement.\nSupport the creation and maintenance of training materials and structured learning paths.\nSecurity-approved CI/CD Toolchain\nDrive the migration to a standardised CI/CD pipeline using an Enterprise selected and security approved toolset in collaboration with Enterprise Architecture and Platform Engineering.\nDiscover, Identify and record all DevSecOps tooling being used by Development Teams across the organisation.\nMaintain an inventory of tools used across teams and ensure compliance with security policies.\nCollaborate with Platform Engineering, Enterprise Architecture, Cybersecurity and Development Teams to embed security controls in the pipeline and design secure SDLC patterns.\nSupport the implementation of SPDA-approved software applications and extensions. \nIdentified and Discovered DevSecOps tooling should be integrated with ASPM tooling and channelled through SPDA, where applicable or retired for teams to move to approved tooling.\nEnsure security assessments are passed to and conducted by the Secure by Design on CI/CD pipelines to meet CHARM 14.2.5-A requirements.\nProvide guidance on secure tool usage and integration across development environments.\n\nAutomated Scanning, Remediating, and Reporting of Vulnerabilities\nAssist with the implementation of automated scanning tools including SAST, SCA, DAST, and secret scanning.\nSupport the rollout of scanning capabilities and ensure coverage across all teams.\nCollaborate with teams to define and implement vulnerability management processes.\nDevelop and maintain real-time/near real-time vulnerability dashboards.\nWork with Chapter Leads and Champions to continuously improve security posture and maturity.\nAlign vulnerability remediation with DevSecOps maturity to target a state where critical and high vulnerabilities are remediated prior to code release into production environments.\nTrack vulnerability debt and ensure reduction targets are met.\nThe ideal candidate for this role will have:\n3-year Technical Diploma/Degree in Information Security, Computer Science or Engineering.\nMinimum of 3-5 years of experience in Cyber Security role.\nCore competencies, knowledge, and experience:\nKnowledge of common information technology management / compliance frameworks such as ISO/IEC 27001, NIST CSF, ISF, PCI DSS, OWASP, SANS etc.\nA deep understanding of Technology Security risks and mitigating solutions.\nA diverse security background with knowledge and experience in three or more of the Security Domains including: Security Assessment and Testing; Software Development Security; Security Governance and Risk Management; Security Architecture and Engineering; Communication and Network Security; Identity and Access Management; Security Operations; Asset Security. \nSpecialist experience in either DevSecOps, Application Security, Security Architecture or Offensive Security will be an added advantage.\nKnowledge of operating systems such as Windows and Linux and how to secure them.\nKnowledge of and/ or experience in creating and managing DevSecOps pipelines practicing SCA, SAST, DAST, and Security as Code will be an added advantage.\nBe well-versed in at least one of the programming languages like Java, PHP, Python, Ruby, and Perl ,or other, so as to collaborate competently with software engineering teams within the organization to identify and implement opportunities for improvement and automation in the CI/CD pipeline.\nKnowledge of Cloud and container technologies such as AWS/GCP/Azure, Docker, Kubernetes, and how to implement CI/CD pipelines in developer tools such as Gitlab will be an added advantage.\nKnowledge of configuration management tools such as Chef, Puppet, and Ansible will be an added benefit.\nAbility to work under time and resource pressure.\nAn ability and desire to collaborate and communicate with a broad set of stakeholders. \nA customer-focused, responsive, and transparent attitude.\nWe make an impact by offering:\nEnticing incentive programs and competitive benefit packages\nRetirement funds, risk benefits, and medical aid benefits\nCell phone and data benefits, advantages fibre connection discounts, and exclusive staff discounts offered in collaboration with partner companies\nClosing date for Applications: 20 October 2026.\nThe base location for this role is Midrand, Vodacom Campus.\nThe company's approved Employment Equity Plan and Targets will be considered as part of the recruitment process. As an Equal Opportunities employer, we actively encourage and welcome people with various disabilities to apply.\nVodacom is committed to an organisational culture that recognises, appreciates, and values diversity & inclusion.","description_format":"text","description_chars":7288,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Mobile Networks","Broadband","IoT Connectivity"],"lifecycle":[{"event":"open","at":"2026-10-13T22:51:51Z"},{"event":"close","at":"2026-10-22T12:46:20Z"}],"visa":[],"liveness":null,"pay":null,"html_url":"https://alion.io/job/vodafone-group-specialist-devsecops","json_url":"https://alion.io/job/vodafone-group-specialist-devsecops.json","meta":{"generated_at":"2026-10-24T09:47:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14230,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":51587},"rest":"https://alion.io/mcp/rest/get_company?id=51587"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fvodafone-group-specialist-devsecops"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fvodafone-group-specialist-devsecops"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fvodafone-group-specialist-devsecops"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/vodafone-group-specialist-devsecops\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fvodafone-group-specialist-devsecops"}]}