Senior Executive, DevSecOps Engineering

Position: Senior DevSecOps Engineering
Location- Petaling Jaya, Selangor

About the Role

We are looking for a Senior DevSecOps Engineering to strengthen security across the entire Software Development Lifecycle (SDLC). You will be responsible for embedding security into CI/CD pipelines, automating security controls, securing cloud environments, and ensuring vulnerabilities are identified and remediated before production deployment.

Working closely with Development, Cloud, Infrastructure, Security, Risk, and Operations teams, you will play a key role in building secure, scalable, and compliant technology platforms.

Key Responsibilities

• Implement and maintain DevSecOps practices across the SDLC.
• Integrate SAST, DAST, SCA, secrets scanning, container security, API security, and IaC security testing within CI/CD pipelines.
• Conduct threat modeling and security reviews during application design and development.
• Develop and enforce risk-based security gates and secure release controls.
• Manage vulnerability assessment, remediation tracking, and security reporting.
• Secure AWS cloud environments, containers, serverless applications, and Infrastructure-as-Code deployments.
• Implement IAM, secrets management, and policy-as-code controls.
• Support security monitoring, incident response, and continuous security improvement initiatives.
• Collaborate with development and operations teams to promote a security-first culture.

Requirements

• Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related fields.

• Minimum 3 years of experience in DevSecOps, Application Security, Cloud Security, Platform Engineering, or Secure CI/CD environments.

• Strong knowledge of AWS Security Services, IAM, Encryption, Logging, Network Security, and Cloud Security best practices.

• Hands-on experience with:

  • SAST, DAST, SCA, Secrets Management
  • Terraform, Ansible, CloudFormation
  • Docker & Container Security
  • CI/CD Security Pipelines
  • API Security Testing
  • Vulnerability Management
  • GitHub, GitLab, or Bitbucket

• Proficiency in Python, Bash, or PowerShell scripting.

• Familiarity with OWASP, NIST, ISO 27001, and CIS Benchmarks.

Preferred Skills

• Secure SDLC & Threat Modeling
• DevSecOps Automation
• Cloud-Native Security
• Software Supply Chain Security
• Security Governance & Compliance
• Policy-as-Code
• Security Monitoring & Incident Response