Senior Specialist - DevSecOps at MTN Nigeria

Reports To: Senior Manager - Information Security

Division: Information Technology

Mission:

The Senior Specialist, DevSecOps is responsible for the delivery of the design, implementation , and continuous improvement of secure DevOps processes within MTN Nigeria by integrating security controls, automation, and monitoring into CI/CD pipelines, ensuring rapid delivery of high-quality and secure applications. They will drive a security-first engineering culture by proactively identifying risks, automating security controls, and enabling development teams to deliver scalable, compliant, and resilient systems at speed.

Description:

The role operates within a highly complex internal technology and delivery ecosystem, requiring deep technical expertise and strong coordination across multiple domains:

• Application & Platform Complexity
• • Securing diverse enterprise applications, digital platforms, with varying architectures (monolithic, microservices, APIs)
  • Managing security across legacy systems and modern cloud-native applications
  • Ensuring consistent security standards across multiple development teams and product lines
• CI/CD & DevOps Integration
• • Embedding security into end-to-end CI/CD pipelines without disrupting delivery timelines
  • Managing integration of multiple security tools (SAST, DAST, SCA, secrets scanning) within automated workflows
  • Handling pipeline failures, false positives, and tuning tools for optimal performance
• Cloud & Infrastructure Complexity
• • Securing multi-cloud and hybrid environments with differing configurations and controls
  • Implementing secure Infrastructure as Code (IaC) while maintaining scalability and consistency
  • Managing containerized environments (e.g., Kubernetes) with evolving security requirements
• Data Protection & Access Control
• • Enforcing data security, encryption, and access governance across internal systems
  • Managing identity and access controls (IAM) for developers, systems, and applications
  • Ensuring proper handling of sensitive customer and business data across environments
• Tooling & Automation Challenges
• • Selecting, integrating, and maintaining DevSecOps toolchains across the organization
  • Ensuring interoperability between tools (CI/CD, security scanners, ticketing systems, SIEM)
  • Continuously optimizing automation to reduce manual intervention
• Compliance & Internal Governance
• • Aligning internal processes with security policies, standards, and audit requirements
  • Supporting internal audits, risk assessments, and control validations
  • Maintaining documentation and evidence for compliance without slowing delivery

Education:

• Bachelor’s degree
• Master’s in information science is preferred
• Certification:Security Certifications (Minimum of 1)
  • Certified Information Systems Security Professional (CISSP)
  • Certified Information Security Manager (CISM)
  • Certified Ethical Hacker (CEH)
  • Cloud & DevSecOps related professional Certifications
  • AWS Certified Security – Specialty
  • Microsoft Azure Security Engineer Associate
  • Google Professional Cloud Security Engineer
  • Certified Kubernetes Security Specialist (CKS)

Experience:

6–13 years experience in IT, Cybersecurity, or DevOps roles

• Minimum of 5+ years specifically in DevSecOps 
• Experience in large-scale, high-availability environments (telecom, fintech, or enterprise IT)
• Proven track record of implementing secure CI/CD pipelines and automation
• Proficiency in: 
  • Secure software development lifecycle
  • Cloud security architecture (AWS, Azure, GCP)
  • Containerization and orchestration security (Docker, Kubernetes)
  • API security and microservices architecture
  • Identity and Access Management (IAM)
  • Vulnerability management and security testing tools (SAST, DAST, SCA)
• Experience working in a large organization