DevSecOps Engineer
Summary
The DevSecOps Engineer will manage CI/CD pipelines and implement security scanning, vulnerability management, and compliance protocols within government environments. The role requires expertise in AWS, GitLab, and various security tools to ensure robust data protection and system security.
Responsibilities:
- Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem.
- Configure GitLab for version control and automated deployment workflows
- Implement code quality gates using SonarQube for static code analysis.
- Manage security scanning using Fortify on Demand (FOD) for vulnerability assessment.
- Oversee dependency scanning and management using Nexus IQ.
- Coordinate with CloudSCAPE for security compliance scanning and remediation.
- Implement and maintain Automated Baseline Log Review (ABLR) systems.
- Manage Central Accounts Management (CAM) integration for user access control.
- Coordinate and resolve Vulnerability Assessment and Penetration Testing (VAPT) findings.
- Ensure compliance with Personal Data Protection Impact Assessment (PDPIA) requirements
- Implement and maintain Vulnerability Management System (VMS).
- Manage secrets and encryption key rotation for data protection.
- implement and maintain data retention policies
- Support SaaS whitelisting processes and approvals.
- Coordinate System Security Acceptance Testing (SSAT) activities
- Work closely with Data Engineers, Data Analysts, and Security Technical Teams.
Requirements:
- Minimum 3 years of DevOps Engineering Experience.
- Experience working in Government Environments, such as GCC
- Experience in Agile Development Methodologies.
- Expertise in AWS Services
- Experience with GitLab CI/CD Pipeline development and management
- Knowledge of security scanning tools such as SonarQube, Fortify, Nexus IQ
- Strong scripting skills in Python, Bash and PowerShell
- Experience with Government Security Clearance Processes.
- Knowledge of Data Classification and handling procedures
- Understanding of Encryption Mechanisms and Key Management.
- Experience with Security Monitoring and Incident Response Procedures.
- Familiarity with Vulnerability Management and remediation processes.
Interested candidates, please click on the following link to begin your job search journey and submit your curriculum vitae (CV) directly.
By sending us your personal data and curriculum vitae (CV), you are deemed to consent to PERSOL Singapore Pte Ltd (""PERSOL"") and its local and overseas subsidiaries and affiliates to collect, use and disclose your personal data to prospective employers/companies based in any country for purposes of evaluating suitability for employment, conducting reference checks, administering employment related services, complying with Government’s health advisories and such other purposes stated in our Privacy Policy.
We may use artificial intelligence (""AI"") and machine learning technologies to support our recruitment and placement services, including screening resumes, assessing qualifications and experience, and identifying skills and job matches. Where permitted by applicable law, we may also use such personal data to develop, train, test, improve and/or fine-tune AI and machine learning technologies that support our recruitment and business operations.
For more information on how we collect, use, disclose and protect your personal data, please refer to our Privacy Policy:
https://www.persolsingapore.com/policies.
If you wish to withdraw your consent, including consent relating to the use of your personal data for AI-enabled recruitment activities and AI development activities, please email us at sg.dataprotection@persolapac.com.
PERSOL Singapore Pte Ltd • RCB No. 200007268E • EA License No 01C4394 • Reg. R26160508 (Leon Neo Hang Yang)