Dev Security Operations Specialist

Tech Mahindra; Kampung Malaysia Tambahan; On-site; MYR 90,000 - 150,000; Full time

Job summary

Tech Mahindra in Kuala Lumpur is seeking a DevSecOps Specialist with deep expertise in application and infrastructure security, secure software practices, and security automation. The role emphasizes Python and Linux shell scripting and hands-on CI/CD security integration.

You will drive secure engineering across cloud-native and AI-enabled environments, collaborate with development, operations, and security teams, and continuously improve security controls within Azure DevOps pipelines.

Qualifications

• Extensive experience in DevSecOps, app security, or infrastructure security.
• Strong Python and Linux shell scripting skills.
• Hands-on experience with SAST and DAST testing tools.

Responsibilities

• Design, implement, and enhance DevSecOps practices across software development and deployment pipelines.
• Integrate and manage security testing tools, including SAST, DAST, dependency scanning, and container security solutions.
• Develop and maintain security automation scripts using Python and Linux Shell Scripting.
• Perform application and infrastructure security assessments and drive remediation efforts.
• Collaborate with development, operations, and security teams to embed security controls within the SDLC.
• Implement and manage security controls within Azure DevOps CI/CD pipelines.
• Support the secure adoption of AI/ML solutions through AI security assessments, governance, and risk management practices.
• Develop and maintain security standards, policies, and best practices for cloud, DevOps, and AI-enabled environments.
• Monitor emerging threats and recommend appropriate security controls and mitigations.

Skills

DevSecOps

Application Security

Infrastructure Security

Tools

SAST

DAST

Job description

Tech Mahindra represents the connected world, offering innovative and customer-centric information technology experiences, enabling Enterprises, Associates, and the Society to Rise. It has 150,000+ professionals working for 1000+ Global Customers (including Fortune 500 companies) in 90 Countries. We’re part of the esteemed Mahindra group, headquartered in India. Under a new CEO, Tech Mahindra is committed to a transformative journey with 'Scale @ Speed' as our guiding principle.

Job Description – DevSecOps Specialist

Experience: 5+ Years

Location: KL

Job Description:

We are seeking a skilled DevSecOps Specialist with expertise in application and infrastructure security, secure software development practices, and security automation. The ideal candidate will possess strong scripting capabilities in Python and Linux Shell Scripting, along with hands‑on experience integrating security throughout the SDLC and CI/CD pipelines. This role requires a proactive security mindset and the ability to drive secure engineering practices across cloud‑native and AI‑enabled environments.

Key Responsibilities

• Design, implement, and enhance DevSecOps practices across software development and deployment pipelines.
• Integrate and manage security testing tools, including SAST, DAST, dependency scanning, and container security solutions.
• Develop and maintain security automation scripts using Python and Linux Shell Scripting.
• Perform application and infrastructure security assessments and drive remediation efforts.
• Collaborate with development, operations, and security teams to embed security controls within the SDLC.
• Implement and manage security controls within Azure DevOps CI/CD pipelines.
• Support the secure adoption of AI/ML solutions through AI security assessments, governance, and risk management practices.
• Develop and maintain security standards, policies, and best practices for cloud, DevOps, and AI-enabled environments.
• Monitor emerging threats and recommend appropriate security controls and mitigations.

Must-Have Skills

• Vast experience in DevSecOps, Application Security, or Infrastructure Security.
• Strong proficiency in Python and Linux Shell Scripting.
• Hands‑on experience with:
• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)