- Singapore Central Region (Singapore) Singapore
JOBSTER PRIVATE LTD. Hiring! Full Time DevSecOps Engineer - 1659 in Central Region (Singapore), Earn up to SGD 8,997 - Ricebowl
Share
Save
Working Location
Job Description
Responsibilities
Responsibilities
Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS, including runners, branching/merge controls and access management.
Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement appropriate security and quality gates.
Apply shift-left security practices across the SDLC, covering code, dependencies, containers and application deployments.
Automate application build, testing, security scanning and deployment across development and production environments.
Support containerised application deployment using Docker and Kubernetes/EKS.
Manage pipeline credentials, secrets and service accounts securely.
Develop reusable pipeline templates and standardise DevSecOps practices across AE applications.
Troubleshoot pipeline, security scanning and deployment issues and support developers in resolving identified findings.
Experience and Skills Needed
Degree or Diploma in Computer Science, Information Technology, Software/Computer Engineering or related discipline.
Hands-on experience with Lab CI/CD, including pipeline configuration
Good understanding of SDLC, DevSecOps and shift-left security, including SAST, DAST, Software Composition Analysis (SCA) and security gates.
Experience integrating application security and code-quality tools, preferably Fortify, Nexus IQ and SonarQube, into CI/CD pipelines.
Experience with Docker and Kubernetes, with working knowledge of AWS/EKS environments.
Scripting experience using Python, Bash, PowerShell or equivalent.
Working knowledge of Linux, networking, access control and secrets management.
Strong troubleshooting skills across CI/CD, security tooling and application deployment.
Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS, including runners, branching/merge controls and access management.
Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement appropriate security and quality gates.
Apply shift-left security practices across the SDLC, covering code, dependencies, containers and application deployments.
Automate application build, testing, security scanning and deployment across development and production environments.
Support containerised application deployment using Docker and Kubernetes/EKS.
Manage pipeline credentials, secrets and service accounts securely.
Develop reusable pipeline templates and standardise DevSecOps practices across AE applications.
Troubleshoot pipeline, security scanning and deployment issues and support developers in resolving identified findings.
Experience and Skills Needed
Degree or Diploma in Computer Science, Information Technology, Software/Computer Engineering or related discipline.
Hands-on experience with Lab CI/CD, including pipeline configuration
Good understanding of SDLC, DevSecOps and shift-left security, including SAST, DAST, Software Composition Analysis (SCA) and security gates.
Experience integrating application security and code-quality tools, preferably Fortify, Nexus IQ and SonarQube, into CI/CD pipelines.
Experience with Docker and Kubernetes, with working knowledge of AWS/EKS environments.
Scripting experience using Python, Bash, PowerShell or equivalent.
Working knowledge of Linux, networking, access control and secrets management.
Strong troubleshooting skills across CI/CD, security tooling and application deployment.
Important Information
Never provide your bank or credit card details when applying for jobs. Do not transfer any money or complete unrelated online surveys. If you see something suspicious, Report this Job ad.
Learn More