Secure by Design Specialist

About the role

The Secure by Design Specialist will act as the primary architect of security resilience, embedding security into product lifecycles from the earliest stages. This role bridges engineering, risk governance, and customer experience to ensure every deployment is secure by default.

Key responsibilities

• Lead security evaluation of system designs, network topologies, and application logic.
• Integrate security controls into early‑stage project requirements following Vodafone CHARM, group standards, and OWASP Top Ten.
• Conduct deep‑dive technical assessments of third‑party APIs, SDKs, and cloud services.
• Evaluate vendor security maturity through technical audits and CHARM‑based reviews.
• Facilitate advanced threat‑modeling sessions (STRIDE, PASTA) for high‑impact projects.
• Establish secure integration patterns for internal and external data exchanges.
• Monitor and secure the CI/CD pipeline, perform comprehensive security audits, and respond to incidents.
• Provide security expertise to development and operations teams and promote a security‑first culture.

Required profile

• Proven ability to lead security assessments and embed controls early in projects.
• Strong experience with threat modeling methodologies (STRIDE, PASTA).
• Deep knowledge of OWASP Top Ten and CHARM security frameworks.
• Experience evaluating third‑party integrations and vendor security posture.
• Excellent communication skills to translate security policies into actionable technical requirements.

Required skills

• Threat modeling (STRIDE, PASTA)
• OWASP Top Ten
• Security assessment of APIs, SDKs, and cloud services
• CI/CD pipeline security
• Security audits and incident response
• Vendor security maturity evaluation
• Secure integration pattern design

What we offer

• Opportunity to shape security strategy across Digital IT, M‑PESA, and Network divisions.
• Access to cutting‑edge security tools and continuous learning resources.
• Collaborative environment focused on resilience and customer trust.