Senior Specialist - DevSecOps.Information Technology

Reports To:

Senior Manager - Information Security

Division:

Information Technology

Mission:

• The Senior Specialist, DevSecOps is responsible for the delivery of the design, implementation, and continuous improvement of secure DevOps processes within MTN Nigeria by integrating security controls, automation, and monitoring into CI/CD pipelines, ensuring rapid delivery of high-quality and secure applications. They will drive a security-first engineering culture by proactively identifying risks, automating security controls, and enabling development teams to deliver scalable, compliant, and resilient systems at speed.

Description:

The role operates within a highly complex internal technology and delivery ecosystem, requiring deep technical expertise and strong coordination across multiple domains:

• Application & Platform Complexity
• Securing diverse enterprise applications, digital platforms, with varying architectures (monolithic, microservices, APIs)
• Managing security across legacy systems and modern cloud-native applications
• Ensuring consistent security standards across multiple development teams and product lines
• CI/CD & DevOps Integration
• Embedding security into end-to-end CI/CD pipelines without disrupting delivery timelines
• Managing integration of multiple security tools (SAST, DAST, SCA, secrets scanning) within automated workflows
• Handling pipeline failures, false positives, and tuning tools for optimal performance
• Cloud & Infrastructure Complexity
• Securing multi-cloud and hybrid environments with differing configurations and controls
• Implementing secure Infrastructure as Code (IaC) while maintaining scalability and consistency
• Managing containerized environments (e.g., Kubernetes) with evolving security requirements
• Data Protection & Access Control
• Enforcing data security, encryption, and access governance across internal systems
• Managing identity and access controls (IAM) for developers, systems, and applications
• Ensuring proper handling of sensitive customer and business data across environments
• Tooling & Automation Challenges
• Selecting, integrating, and maintaining DevSecOps toolchains across the organization
• Ensuring interoperability between tools (CI/CD, security scanners, ticketing systems, SIEM)
• Continuously optimizing automation to reduce manual intervention
• Compliance & Internal Governance
• Aligning internal processes with security policies, standards, and audit requirements
• Supporting internal audits, risk assessments, and control validations
• Maintaining documentation and evidence for compliance without slowing delivery

Education:

• Bachelor’s degree
• Master’s in information science is preferred
• Certification:Security Certifications (Minimum of 1)
• Certified Information Systems Security Professional (CISSP)
• Certified Information Security Manager (CISM)
• Certified Ethical Hacker (CEH)
• Cloud & DevSecOps related professional Certifications
• AWS Certified Security – Specialty
• Microsoft Azure Security Engineer Associate
• Google Professional Cloud Security Engineer
• Certified Kubernetes Security Specialist (CKS)

Experience:

6–13 years experience in IT, Cybersecurity, or DevOps roles

• Minimum of 5+ years specifically in DevSecOps
• Experience in large-scale, high-availability environments (telecom, fintech, or enterprise IT)
• Proven track record of implementing secure CI/CD pipelines and automation
• Proficiency in:
• Secure software development lifecycle
• Cloud security architecture (AWS, Azure, GCP)
• Containerization and orchestration security (Docker, Kubernetes)
• API security and microservices architecture
• Identity and Access Management (IAM)
• Vulnerability management and security testing tools (SAST, DAST, SCA)
• Experience working in a large organization