DevSecOps Engineer

Hytech Consulting Management; Kuala Lumpur; On-site; MYR 80,000 - 120,000; Full time

Job summary

A leading IT consultancy in Kuala Lumpur seeks a skilled DevSecOps Engineer with a strong background in cloud infrastructure management and security. The role focuses on embedding security practices throughout the software development lifecycle, automating security controls, and collaborating with cross-functional teams. Candidates should possess a Bachelor's degree in a relevant field and have over three years of experience in cloud environments, particularly AWS. Join a dynamic team committed to enhancing cloud security practices.

Qualifications

• 3+ years of experience in Cloud Infrastructure Management or DevOps.
• Experience with AWS cloud platforms and securing cloud-native applications.
• Strong communication and problem-solving skills.

Responsibilities

• Embed security best practices within the cloud environment.
• Design and implement automated security detection measures.
• Collaborate with IT operations and security teams.

Skills

AWS Cloud Infrastructure Management

Security Integration

Automation

Incident Response

Risk Assessment

Education

Bachelor’s degree in Computer Science or equivalent

Tools

AWS Security Hub

Jenkins

Docker

Terraform

Job description

We are seeking a skilled and experienced DevSecOps Engineer to join our team. The ideal candidate will have a strong background in cloud infrastructure management, security, and IT operations. You will be responsible for embedding security practices into our cloud environment, ensuring that security is a core component throughout the software development lifecycle (SDLC). Your role will involve collaborating with development, operations, and security teams to automate security controls, audit compliance, and manage vulnerabilities.

Key Responsibilities

• Security Integration: Embed security best practices within cloud environment, ensuring that security checks are automated and integrated at every stage of the software development lifecycle.
• Automation: Design and implement automated security detection/prevention measures and reports to identify and mitigate risks in cloud environment.
• Collaboration: Work closely with development, IT operations, and security teams to create a culture of security awareness and shared responsibility.
• Monitoring and Logging: Implement and maintain security monitoring, logging, and alerting tools to detect and respond to security incidents in real-time.
• Compliance: Ensure compliance with industry standards and regulations (e.g., GDPR, HIPAA, PCI-DSS) by integrating relevant security controls and conducting regular audits.
• Risk Assessment: Perform threat modeling, risk assessments, and vulnerability analysis to proactively identify and address potential security threats.
• Incident Response: Develop and maintain incident response plans, and collaborate with relevant teams to respond to and mitigate security incidents.
• Continuous Improvement: Continuously evaluate and improve security practices within the DevOps environment, staying up-to-date with the latest security trends, tools, and techniques.
• Documentation: Maintain clear and comprehensive documentation of security policies, procedures, and configurations.

Qualifications

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field (or equivalent experience).

Experience

• 3+ years of experience in Cloud Infrastructure Management or DevOps, with a focus on managing cloud infrastructure and integrating security into AWS cloud environments.
• Experience with AWS cloud platforms and securing cloud-native applications.
• Strong understanding of AWS security product like Security Hub, GuardDuty and others.

Technical Skills

• Proficiency in managing AWS Cloud Infrastructure, especially AWS Control Tower, AWS Organization, AWS Landing Zone, AWS IAM Identity Center, AWS Transit Gateway and AWS Security Product.
• Experience with CI/CD tools (Jenkins, GitLab CI, CircleCI, etc.) and security tools (SonarQube, OWASP ZAP, Snyk, etc.) and its workflow.
• Familiarity with containerization (Docker, Kubernetes) and securing containerized applications.
• Knowledge of infrastructure-as-code (IaC) tools (Terraform, Ansible) and related security considerations.
• Experience with vulnerability management tools (Nessus, Qualys) and techniques.

Soft Skills

• Strong communication and collaboration skills, with the ability to work effectively in a cross-functional team.
• Problem-solving mindset with a proactive approach to identifying and addressing security challenges.
• Ability to stay current with emerging security threats and technologies.

Preferred Qualifications

• Certifications such as AWS Solution Architect (Associate/ Professional) or equivalent.
• Experience in a regulated environment (e.g., healthcare, finance) with knowledge of specific compliance requirements.
• Familiarity with agile development methodologies and practices.