Senior Executive, DevSecOps Engineering
A Senior DevSecOps engineer embeds security across the SDLC in Petaling Jaya — integrating SAST/DAST/SCA, secrets and container scanning into CI/CD pipelines, securing AWS cloud, serverless and IaC deployments, and managing vulnerability tracking and incident response alongside dev, cloud and security teams.
- Compensation
- Not disclosed
- Location
- Petaling Jaya, Selangor
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 3+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related fields
- Minimum 3 years of experience in DevSecOps, Application Security, Cloud Security, Platform Engineering, or Secure CI/CD environments
- Strong knowledge of AWS Security Services, IAM, Encryption, Logging, Network Security, and Cloud Security best practices
- Hands-on experience with SAST, DAST, SCA, Secrets Management
- Hands-on experience with Terraform, Ansible, CloudFormation
- Hands-on experience with Docker & Container Security
- Hands-on experience with CI/CD Security Pipelines
- Hands-on experience with API Security Testing
- Hands-on experience with Vulnerability Management
- Hands-on experience with GitHub, GitLab, or Bitbucket
- Proficiency in Python, Bash, or PowerShell scripting
- Familiarity with OWASP, NIST, ISO 27001, and CIS Benchmarks
Nice to have
- Secure SDLC & Threat Modeling
- DevSecOps Automation
- Cloud-Native Security
- Software Supply Chain Security
- Security Governance & Compliance
- Policy-as-Code
- Security Monitoring & Incident Response
Full description
Position: Senior DevSecOps Engineering
Location- Petaling Jaya, Selangor
About the Role
We are looking for a Senior DevSecOps Engineering to strengthen security across the entire Software Development Lifecycle (SDLC). You will be responsible for embedding security into CI/CD pipelines, automating security controls, securing cloud environments, and ensuring vulnerabilities are identified and remediated before production deployment.
Working closely with Development, Cloud, Infrastructure, Security, Risk, and Operations teams, you will play a key role in building secure, scalable, and compliant technology platforms.
Key Responsibilities
- Implement and maintain DevSecOps practices across the SDLC.
- Integrate SAST, DAST, SCA, secrets scanning, container security, API security, and IaC security testing within CI/CD pipelines.
- Conduct threat modeling and security reviews during application design and development.
- Develop and enforce risk-based security gates and secure release controls.
- Manage vulnerability assessment, remediation tracking, and security reporting.
- Secure AWS cloud environments, containers, serverless applications, and Infrastructure-as-Code deployments.
- Implement IAM, secrets management, and policy-as-code controls.
- Support security monitoring, incident response, and continuous security improvement initiatives.
- Collaborate with development and operations teams to promote a security-first culture.
Requirements
- Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related fields.
- Minimum 3 years of experience in DevSecOps, Application Security, Cloud Security, Platform Engineering, or Secure CI/CD environments.
- Strong knowledge of AWS Security Services, IAM, Encryption, Logging, Network Security, and Cloud Security best practices.
- Hands-on experience with:
- SAST, DAST, SCA, Secrets Management
- Terraform, Ansible, CloudFormation
- Docker & Container Security
- CI/CD Security Pipelines
- API Security Testing
- Vulnerability Management
- GitHub, GitLab, or Bitbucket
- Proficiency in Python, Bash, or PowerShell scripting.
- Familiarity with OWASP, NIST, ISO 27001, and CIS Benchmarks.