SecOps Engineer

Founded in South Africa in 2007, Praekelt.org builds mobile technologies to solve the world’s largest social problems  We work with governments, international NGOs, foundations and social enterprises to create and deliver essential information and vital services.

We’re looking for a talented SecOps Engineer. In this role, you will reveal security and privacy issues our users need from our services by conducting security audits and exploring the behaviors and motivations that put our users at risk. You’ll work collaboratively with teams of service designers, engineers and our legal team to design new strategies and policies for safety and security that ensure strategic, technology, business and security objectives align. You’ll work with engineers to design and code software that improves security on frontend and backend systems. And you’ll educate colleagues, clients and partners on privacy and security by delivering exciting oral, written and visual presentations of your work.

Key Responsibilities:

• Technical:Design and Code software utilities that can help secure applications and their supporting infrastructure.Assist in design and implementation of features that make it easier for end-users to be secure on platforms offered by the organisation.Carry out security audits on existing software systems and produce detailed technical advisories on risk mitigation strategies as well as analysis of the systems’ security posture in the context of its intended measurable outcome.Act as technical point of contact for external security audits on projects and core systems.
• Design and Code software utilities that can help secure applications and their supporting infrastructure.
• Assist in design and implementation of features that make it easier for end-users to be secure on platforms offered by the organisation.
• Carry out security audits on existing software systems and produce detailed technical advisories on risk mitigation strategies as well as analysis of the systems’ security posture in the context of its intended measurable outcome.
• Act as technical point of contact for external security audits on projects and core systems.
• Leadership: Takes ownership of their operational strategies and technical solutions and identifies opportunities to help teammates in achieving team goals.Act as architectural advisor overseeing the design, implementation and administration of the security utilities that need to be implemented on top of existing systems.
• Takes ownership of their operational strategies and technical solutions and identifies opportunities to help teammates in achieving team goals.
• Act as architectural advisor overseeing the design, implementation and administration of the security utilities that need to be implemented on top of existing systems.
• Policy development:Develop protocols that help all team members stay on top of their security needs.Create policies that ensure all systems follow regulatory security standards and compliance.
• Develop protocols that help all team members stay on top of their security needs.
• Create policies that ensure all systems follow regulatory security standards and compliance.
• Communication: Adapt communication and context for a diverse audience. Initiate conversations to get the support/clarity necessary to carry out a task. Identify appropriate forms of communication given the specific situation.Increase operational security and security policy awareness across the organisation by delivering key topics in a manner accessible to non-technical and technical roles.Engagement with partner communities and clients in order to communicate the impact and necessity of information security controls.
• Adapt communication and context for a diverse audience. Initiate conversations to get the support/clarity necessary to carry out a task. Identify appropriate forms of communication given the specific situation.
• Increase operational security and security policy awareness across the organisation by delivering key topics in a manner accessible to non-technical and technical roles.
• Engagement with partner communities and clients in order to communicate the impact and necessity of information security controls.

Minimum Qualifications

• 3 - 5 years of experience working in information security
• Preferably one of the following certifications or relevant experience:CISSP: Certified Information Systems Security ProfessionalCISM: Certified Information Security ManagerCEH: Certified Ethical HackerCompTIA Security+DSOE: DevSecOps Engineering
• CISSP: Certified Information Systems Security Professional
• CISM: Certified Information Security Manager
• CEH: Certified Ethical Hacker
• CompTIA Security+
• DSOE: DevSecOps Engineering

Relevant Experience and Skills

• Excellent written and verbal communication skills.
• Software development and scripting skills.
• In-depth knowledge of either POPIA and/or GDPR
• Experience working with public cloud services, such as AWS, Azure, or GCP

• You are great at understanding how human behavior influences security and privacy and are obsessed with what technology can do to create a positive impact on people and organisations, safely.
• You’re a systems thinker; you love solving big, hairy problems including complex systems and user experiences.
• You’re a confident and flexible member of interdisciplinary teams where harmonious collaboration is imperative.
• You’re a passionate technophile; You are always in-the-know about the latest trends, technologies and platforms.
• You know what it takes to design and develop systems that enable inclusive and sustainable projects at pan-African or global scale
• You believe improvement relies on active measurement and you strive to build feedback loops into everything you do.
• You know how to communicate your ideas; You have excellent written English and oral presentation skills.
• You thrive in an unstructured, unsupervised environment and you’re self-motivated to meet deadlines.

Praekelt.org is committed to creating a fully inclusive and diverse environment that embraces difference, cultivates inclusivity and is committed to people feeling like they belong within all teams in the organisation. We actively encourage applicants of all races, ethnicities, religions, ages, genders, sexual orientations and abilities.