Discovery – Information Governance and Security

Security DevOps Specialist

About Discovery

Discovery’s core purpose is to make people healthier and to enhance and protect their lives. We seek out and invest in exceptional individuals who understand and support our core purpose, and whose own values align with those of Discovery. Our fast-paced and dynamic environment enables smart, self-driven people to be their best. As global thought leaders, Discovery is passionate about innovating in order to not only achieve financial success, but to ignite positive and meaningful change within our society.

About Information Governance and Security (IGS)

The Information Governance and Security function within the Discovery Group aims to provide assurance that the organisation’s information assets are adequately protected against threats on a continual basis. This is achieved by finding the right balance of information security and business freedom.

Key Purpose

The Security DevOps Specialist role at Discovery Limited is responsible for designing, developing and maintaining secure software artefacts, automated security pipelines and security tooling across the software development lifecycle. The role integrates security practices into CI/CD workflows, develops and manages security automation code, and ensures the security of containerised and cloud-native environments. Working within the Information Security Services team, the role builds and maintains security capabilities that enable secure software delivery while protecting Discovery's digital assets and development infrastructure.

Areas of responsibility may include but not limited

• Design, implement and maintain secure CI/CD pipelines with integrated security controls
• Implement security-as-code practices and automate security policy enforcement
• Collaborate with development teams to integrate security testing into SDLC
• Manage container security including image scanning and Kubernetes security policies
• Configure secrets management solutions and secure credential handling
• Develop infrastructure-as-code templates with embedded security controls
• Monitor and respond to security alerts from automated scanning tools
• Conduct security reviews of code and infrastructure configurations
• Create security documentation and operational procedures
• Support incident response for application and infrastructure security events
• Implement cloud security controls across AWS, Azure or GCP environments
• Provide security training to development teams on secure coding practices
• Maintain compliance with security frameworks and audit requirements

Personal Attributes and Skills

• Excellent knowledge of technology environments
• The ability to articulate security in non-technical business impact terms
• Business Writing Skills, Presentation and Facilitation Skills
• Customer Service Orientation, Result Orientation, Negotiation skills
• Personal organisation and time management skills
• Time and Task Delivery Management
• Professional Communication (written, verbal/presenting and listening)
• Interpersonal skills - Ability to build relationships with people from all different backgrounds and at different job levels

Qualifications & Experience

Essential

• IT-related Diploma or Degree
• Relevant experience in DevOps/security
• CI/CD tools experience
• Container/Kubernetes knowledge
• Python/Bash scripting
• 5+ years Senior DevOps experience.
• Experience with container platforms.
• Experience with cloud platforms (AWS, Azure and GCP).

Advantageous

• Application Security.
• Security certifications (Security+, CEH)