Senior Executive, DevSecOps Engineering
Petaling Jaya, Selangor (Onsite)
Role Overview
We are looking for a DevSecOps professional to embed security throughout the software development lifecycle and CI/CD pipelines. The role focuses on improving application, cloud, and infrastructure security by implementing automated security controls, vulnerability management processes, and secure deployment practices, primarily within AWS environments.
Key Responsibilities
- Integrate security into the SDLC, CI/CD pipelines, and release processes.
- Conduct threat modelling and security reviews for applications and platforms.
- Implement security tools such as SAST, DAST, SCA, secrets scanning, container scanning, and IaC scanning.
- Manage vulnerability remediation, security findings, and risk exceptions.
- Secure AWS cloud environments, containers, serverless applications, and infrastructure-as-code platforms (Terraform, CloudFormation, Ansible).
- Enhance software supply chain security, including dependency management, SBOMs, and artifact integrity.
- Implement secure identity, access, and secrets management practices.
- Support security monitoring, incident response, compliance reviews, and audit requirements.
- Collaborate with development, infrastructure, security, and compliance teams to drive a security-first culture.
Requirements
- Bachelor's Degree in Computer Science, Cybersecurity, IT, or related field.
- Minimum 3 years of experience in DevSecOps, Application Security, Cloud Security, or Secure CI/CD environments.
- Strong knowledge of AWS security, DevSecOps practices, secure SDLC, and vulnerability management.
- Hands-on experience with GitLab, GitHub, Bitbucket, Terraform, Docker, and cloud security controls.
- Familiarity with security frameworks such as OWASP, ISO 27001, NIST, CIS Benchmarks, and BNM RMiT.
- Scripting and automation skills using Python, Bash, or PowerShell.
Benefits:
Work Location: In person