Senior DevSecOps Engineer

Cloud security

• Configure and maintain secure cloud infrastructure, including network segmentation, security groups, firewall rules, IAM, jump server access, logging, backup, and monitoring.

Production server and infrastructure support

• Support the day-to-day operation, maintenance, troubleshooting, performance monitoring, availability, patching, backup, and recovery of production servers and infrastructure supporting the payment gateway platform.

Production incident support

• Provide technical support for production incidents, including initial investigation, log collection, root cause analysis, remediation, service restoration, and post-incident improvement actions.

Infrastructure availability and reliability

• Designing observability frameworks, implementing automated monitoring, and developing self-healing systems
• Monitor production system health, resource utilisation, disk usage, CPU, memory, database connectivity, application availability, and infrastructure alerts to ensure service stability and early detection of issues.

Cloudflare / WAF

• Maintain Cloudflare security configuration, WAF rules, TLS settings, bot protection, rate limiting, IP blocking, and security event review.

CI/CD security

• Work with project team to implement secure deployment pipelines, approval gates, secret scanning, dependency scanning, container image scanning, and deployment controls.

Vulnerability management

• Support vulnerability scanning, patching, remediation, retesting, and evidence preparation.

Server and platform hardening

• Implement OS hardening, middleware hardening, Kubernetes hardening, database security baseline, secure configuration standards, and periodic configuration review.

Security Automation & Compliance

• Continuously optimize and automate security workflows to enhance threat detection, incident response, and operational efficiency, providing reports and actionable recommendations for improvement.
• Configure system auto-detection and self-quarantine features, work closely with development and operations teams to share information and stay synchronized.

PCI DSS technical evidence

• Prepare technical evidence for PCI DSS, including firewall rules, access logs, scan results, patch records, hardening records, backup records, monitoring evidence, and change records.

Change and release control

• Ensure infrastructure, cloud, production, and deployment changes follow the approved change management process.

Technical Documentation, Governance & Reporting

• Prepare and maintain technical documentation, operational procedures, and knowledge repositories.
• Prepare and provide periodic reports to management on production server health, infrastructure availability, security events, vulnerability status, patching status, resource utilisation, capacity concerns, cloud cost, and recommended improvement actions.

Requirements:

• Bachelor’s Degree in Computer Science, Information Technology, Engineering, or related field.
• Relevant cybersecurity certifications such as CISSP, CISM, CISA, CEH, or equivalent are preferred.
• At least 5+ years of professional experience in DevOps, cloud infrastructure, system administration, cloud security, infrastructure security, or DevSecOps-related roles.
• Expert level experience with one major cloud provider.
• Experience working in a payment gateway, fintech, banking, merchant acquiring, e-wallet, or financial services environment.
• Experience in supporting security or compliance initiatives such as PCI DSS, ISO 27001, SOC 2, internal audit, external audit, or financial services technology compliance.
• Hands-on experience with security tools such as SIEM, firewalls, IDS/IPS, DLP, EDR, and vulnerability scanners.
• Experience analyzing cloud, infrastructure, network, and application logs to detect security threats, cyber attacks, abnormal system behavior, and operational anomalies, and to support incident investigation and response.
• Experience with backup, disaster recovery, and business continuity planning.
• Strong troubleshooting and incident management skills.
• Good documentation skills, including the ability to prepare technical procedures, infrastructure diagrams, configuration records, security evidence, incident records, and management reports.
• Experience with AI-assisted DevSecOps, AI-assisted IaC review, or AI-assisted security review would be an advantage.