Cloud DevSecOps Engineer

Qualifications

1. Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related field.

2. Hands-on knowledge of secure SDLC practices, threat modelling, secure coding principles, and risk-based security gates.

3. Practical experience integrating SAST, DAST, SCA, secrets scanning, container scanning, API testing, and IaC scanning into CI/CD workflows.

4. Strong knowledge of AWS security services, IAM, SSO, encryption, key management, logging, network controls, and cloud security posture management.

5. Experience securing Terraform, Ansible, CloudFormation, Docker, serverless architectures, artifact repositories, and deployment automation.

6. Understanding of vulnerability management, CVSS and exploitability context, dependency risk, SBOMs, software provenance, and remediation governance.

7. Knowledge of security and compliance frameworks relevant to regulated environments, such as BNM RMiT, ISO/IEC 27001, NIST CSF, CIS Benchmarks, and OWASP guidance.

8. Proficiency with GitLab, Bitbucket, or GitHub, including protected branches, code review controls, runner security, pipeline orchestration, artifact governance, and auditable release approvals.

Pay: RM4,500.00 - RM20,000.00 per month

Experience:

• DevSecOps: 2 years (Preferred)

Work Location: In person