Microservices Security Specialist.

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

Microservices Security Specialist Location: Centurion, Gauteng (provisional – to be confirmed) Positions Available: 5 Salary: Market-related Employment Type: To be confirmed Job Overview We are seeking experienced and technically proficient Microservices Security Specialists to design, implement, manage and continuously improve security controls across enterprise microservices architectures, containerised applications and cloud-native environments. The successful candidates will be responsible for securing distributed applications, APIs, containers, Kubernetes environments and service-to-service communications against cybersecurity threats, vulnerabilities and unauthorised access. This role requires strong hands-on expertise in microservices security, API protection, container security, DevSecOps, secure application architecture and cloud-native security technologies. The ideal candidates will have proven experience implementing security controls within enterprise microservices environments, with a strong understanding of secure software development, application security testing, identity management and Zero Trust security principles. Key Responsibilities Microservices Security Architecture and Implementation Design, implement and maintain security controls across enterprise microservices architectures. Conduct security assessments of distributed applications and microservices environments. Identify and remediate security vulnerabilities within microservices, APIs and supporting infrastructure. Implement secure communication mechanisms between microservices and distributed applications. Apply Zero Trust principles to service-to-service authentication and authorisation. Support the development of secure microservices architecture standards and security design patterns. Conduct threat modelling and security architecture reviews for cloud-native applications. Collaborate with software architects and development teams to implement security-by-design principles. Ensure microservices security controls align with organisational security policies and recognised industry standards. API Security and Service-to-Service Protection Implement and maintain security controls for RESTful APIs, GraphQL APIs and microservices endpoints. Configure secure API authentication and authorisation mechanisms. Implement OAuth 2.0, OpenID Connect, JSON Web Tokens (JWT) and mutual TLS (mTLS). Secure API gateways and manage API access policies. Identify and mitigate common API vulnerabilities, including those outlined in the OWASP API Security Top 10. Implement API rate limiting, request validation and traffic protection mechanisms. Secure service-to-service communications within distributed environments. Monitor API security events and investigate suspicious access patterns. Support API security testing and vulnerability remediation. Container and Kubernetes Security Implement security controls across Docker and Kubernetes environments. Conduct container image vulnerability assessments and security configuration reviews. Secure container registries, runtime environments and orchestration platforms. Configure Kubernetes Role-Based Access Control (RBAC), network policies and workload security controls. Implement secure secrets management and container authentication mechanisms. Monitor container and Kubernetes security events. Identify and remediate misconfigurations within containerised environments. Apply security hardening standards to Kubernetes clusters and workloads. Support container runtime protection and cloud-native threat detection. Collaborate with infrastructure and DevOps teams to maintain secure container platforms. DevSecOps and Secure Software Development Integrate security controls into software development and CI/CD pipelines. Implement automated application security testing within development workflows. Support Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Software Composition Analysis (SCA).

⚑ 岗位信息收录自公开招聘页（公开招聘平台），以雇主官网为准