Senior Executive, DevSecOps Engineering

Position: Senior DevSecOps Engineering
Location- Petaling Jaya, Selangor

About the Role

We are looking for a Senior DevSecOps Engineering to strengthen security across the entire Software Development Lifecycle (SDLC). You will be responsible for embedding security into CI/CD pipelines, automating security controls, securing cloud environments, and ensuring vulnerabilities are identified and remediated before production deployment.

Working closely with Development, Cloud, Infrastructure, Security, Risk, and Operations teams, you will play a key role in building secure, scalable, and compliant technology platforms.

Key Responsibilities

• Implement and maintain DevSecOps practices across the SDLC.

• Integrate SAST, DAST, SCA, secrets scanning, container security, API security, and IaC security testing within CI/CD pipelines.

• Conduct threat modeling and security reviews during application design and development.

• Develop and enforce risk-based security gates and secure release controls.

• Manage vulnerability assessment, remediation tracking, and security reporting.

• Secure AWS cloud environments, containers, serverless applications, and Infrastructure-as-Code deployments.

• Implement IAM, secrets management, and policy-as-code controls.

• Support security monitoring, incident response, and continuous security improvement initiatives.

• Collaborate with development and operations teams to promote a security-first culture.

Requirements

• Bachelor's Degree in Computer Science, Cybersecurity, Information Technology, Engineering, or related fields.

• Minimum 3 years of experience in DevSecOps, Application Security, Cloud Security, Platform Engineering, or Secure CI/CD environments.

• Strong knowledge of AWS Security Services, IAM, Encryption, Logging, Network Security, and Cloud Security best practices.

• Hands-on experience with:

  • SAST, DAST, SCA, Secrets Management

  • Terraform, Ansible, CloudFormation

  • Docker & Container Security

  • CI/CD Security Pipelines

  • API Security Testing

  • Vulnerability Management

  • GitHub, GitLab, or Bitbucket

• Proficiency in Python, Bash, or PowerShell scripting.

• Familiarity with OWASP, NIST, ISO 27001, and CIS Benchmarks.

Preferred Skills

• Secure SDLC & Threat Modeling

• DevSecOps Automation

• Cloud-Native Security

• Software Supply Chain Security

• Security Governance & Compliance

• Policy-as-Code

• Security Monitoring & Incident Response