Business

Cybersecurity job market expands with emerging specialised roles and focus on DevSecOps

Tuesday, 2 December 2025 8:13AM UTC

The global cybersecurity employment landscape is vibrant, with new roles emerging across sectors, highlighting the increasing emphasis on integrating security into development processes and addressing complex threat environments.

The global cybersecurity job market continues to present a vibrant landscape of opportunities, reflecting the increasing demand for specialised skills across diverse sectors and geographies. Recently published listings reveal a wide array of roles ranging from entry-level internships to senior management positions, emphasizing the multifaceted nature of cybersecurity professionals required in today’s interconnected digital environment.

Among the notable openings is the position of Application Security Manager based in Israel, where the role focuses on conducting threat modelling informed by deep product knowledge, coordinating penetration testing, and leading incident response activities related to application-layer breaches. This role, like many others, underscores the critical importance of safeguarding application security as organisations strive to mitigate high-risk vulnerabilities.

In Europe, several prestigious companies are actively recruiting. In France, a Cloud Security Architect role involves securing hybrid AWS and Azure environments, integrating DevSecOps practices into CI/CD pipelines, and enforcing governance around IAM, encryption, and zero-trust frameworks. Similarly, in Ireland, Dunnes Stores seeks a Cybersecurity Defence Senior Manager tasked with devising comprehensive defence strategies and managing threat intelligence derived from open-source intelligence (OSINT) and commercial feeds. Italy presents opportunities for cybersecurity risk engineers and specialists, focusing on risk assessments and investigations into network intrusions, further underscoring the diversity of roles needed to maintain robust security postures.

The Asia-Pacific region is also well represented with openings such as a Cybersecurity Manager in Singapore charged with embedding security-by-design principles within development workflows, managing risk assessments, and ensuring vulnerability management, as well as a Senior Security Information Officer in the Philippines overseeing threat advisory and real-time incident support.

Entry points into the industry are available, exemplified by an internship in the USA that involves assisting with security audits, risk analyses, and phishing remediation, highlighting a pathway for novices to cultivate practical skills in cybersecurity operations.

Emerging focuses in cybersecurity roles include expertise in AI/ML security, supply chain governance, IT-OT system integration, and advanced penetration testing, reflecting the evolving threat landscape. For instance, positions in the UAE and Canada emphasize penetration testing on AI/ML environments and supply chain security compliance respectively, demonstrating the broadening scope of cybersecurity responsibilities.

Parallel to these specialised job openings, the evolving practice of integrating security into development pipelines is gaining momentum. Roles centred on DevSecOps architecture and engineering emphasize the need for professionals who can seamlessly embed security into agile development and continuous integration/continuous delivery (CI/CD) processes. Companies seek experts capable of designing secure, automated pipelines using tools like Jenkins, GitHub Actions, Terraform, Ansible, and orchestrating containerised workloads with Kubernetes, Docker, and OpenShift. These roles are critical in accelerating secure software delivery and enhancing organisational resilience against sophisticated cyber threats.

This synthesis of current cybersecurity vacancies illustrates an industry that demands a rich spectrum of skills, from hands-on technical expertise in penetration testing and incident response to strategic leadership in threat intelligence and security architecture across IT and operational technology environments. For professionals seeking to thrive in this dynamic field, continuous learning and adaptability to emerging technologies and threat tactics remain essential.

📌 Reference Map:

^[1] (Help Net Security) - Paragraphs 1, 2, 3, 4, 5, 6
^[2] (Help Net Security) - Paragraph 1
^[3] (Built In) - Paragraph 7
^[4] (Apex Systems) - Paragraph 7
^[5] (Experfy) - Paragraph 7
^[6] (Joindevops) - Paragraph 7
^[7] (GSA Advantage) - Paragraph 7

Source: Noah Wire Services

More on this

https://www.helpnetsecurity.com/2025/12/02/cybersecurity-jobs-available-right-now-december-2-2025/ - Please view link - unable to able to access data
https://www.helpnetsecurity.com/2025/12/02/cybersecurity-jobs-available-right-now-december-2-2025/ - This article from Help Net Security, dated December 2, 2025, presents a list of current cybersecurity job openings across various global locations. Positions include Application Security Manager in Israel, Cloud Security Architect in France, Cybersecurity Defence Senior Manager in Ireland, Cybersecurity Manager in Singapore, Cybersecurity Risk Engineer in Italy, and Cyber Security Intern in the USA. Each listing provides a brief overview of the role's responsibilities and the company's location, offering insights into the diverse opportunities available in the cybersecurity field at that time.
https://builtin.com/job/devsecops-architect-remote/7711885 - Claritev is seeking a remote DevSecOps Architect to lead the integration of security into Agile/DevOps strategies. Responsibilities include architecting and maintaining robust CI/CD pipelines using tools like Jenkins and GitHub Actions, integrating security into these pipelines, and designing cloud-native architectures using platforms such as AWS and Azure. The role also involves implementing infrastructure monitoring solutions and supporting security audits and compliance requirements, aiming to drive DevSecOps automation and governance policies in a rapidly evolving environment.
https://www.apexsystems.com/job/2089986_usa/devsecops-engineer - Apex Systems is hiring a DevSecOps Engineer for a remote position in the Eastern Time Zone. The role involves deploying and managing containerized services using orchestration tools like Docker, Kubernetes, or OpenShift, automating infrastructure with tools such as Terraform and Ansible, and operating workloads in cloud environments including AWS, Azure, Google Cloud, VMware, or OpenStack. Additional responsibilities include implementing monitoring and observability practices, supporting scalable architectures, and delivering updates in Agile/DevSecOps environments.
https://www.experfy.com/hire/devops/devsecops-architect/ - Experfy is looking for a DevSecOps Architect to integrate security into Agile/DevOps strategies using DevSecOps principles, processes, and tools. The role includes building and maintaining DevSecOps pipelines to adopt a shift-left paradigm for security testing, developing and promoting best practices for DevSecOps and secure CI/CD, and automating security processes into CI/CD pipelines. The architect will also provide strategic direction for DevSecOps automation, conduct research on new platforms and tools, and collect security-related metrics to enhance security visibility across the organization.
https://jobs.joindevops.com/jobs/147231707-devops-engineer - HCLTech is hiring a DevOps Engineer in Singapore. The role involves designing, developing, and maintaining CI/CD solutions organization-wide, collaborating with platform architects and development teams to implement platform CI/CD integration solutions, and managing CI/CD pipelines using tools like Bitbucket, Jenkins, GitLab, ArgoCD, or Tekton. Responsibilities also include configuring application deployments, leading containerization and deployment using Docker, Kubernetes, and OpenShift, and overseeing the installation and maintenance of OpenShift clusters.
https://www.gsaadvantage.gov/ref_text/GS35F339CA/10C23L.3W2EY9_GS-35F-339CA_XFINIONPRICELISTWITHMODPO0026OPTION2025.PDF - This document outlines the responsibilities of a Cloud Solution Architect Lead, including DevSecOps pipeline development, performance monitoring, and migration between cloud environments. The architect applies The Open Group Architecture Framework (TOGAF) in Agile solution designs to minimize technical debt and improve overall velocity. The role also involves experience with message services, microservices/container architectures (e.g., OpenShift, Kubernetes), orchestration, and automation, highlighting the importance of integrating security into cloud infrastructure and development processes.

Noah Fact Check Pro

The draft above was created using the information available at the time the story first emerged. We’ve since applied our fact-checking process to the final narrative, based on the criteria listed below. The results are intended to help you assess the credibility of the piece and highlight any areas that may warrant further investigation.

Freshness check

Score: 10

Notes: The narrative is current, published on December 2, 2025, with no evidence of prior publication or recycled content. The inclusion of recent job listings and specific dates indicates high freshness.

Quotes check

Score: 10

Notes: The narrative does not contain any direct quotes, suggesting original content.

Source reliability

Score: 9

Notes: The narrative originates from Help Net Security, a reputable organisation known for its focus on cybersecurity news and job listings. However, the absence of direct quotes or references to external sources limits the ability to fully assess the reliability of the information presented.

Plausability check

Score: 8

Notes: The job listings and descriptions appear plausible and align with current trends in the cybersecurity job market. However, the lack of direct quotes or references to external sources makes it challenging to fully verify the accuracy of the information.

Overall assessment

Verdict (FAIL, OPEN, PASS): OPEN

Confidence (LOW, MEDIUM, HIGH): MEDIUM

Summary: While the narrative is current and presents plausible job listings from a reputable source, the absence of direct quotes or references to external sources limits the ability to fully verify the accuracy and originality of the content. The lack of supporting details from other reputable outlets and the absence of specific factual anchors such as names, institutions, and dates further reduce the confidence in the overall assessment. Therefore, the overall assessment is 'OPEN' with a 'MEDIUM' confidence rating.

Cybersecurity
Job Market
DevSecOps