DevSecOps Specialist

HCL Technologies Limited; Kampung Malaysia Tambahan; On-site; MYR 120,000 - 180,000; Full time

Job summary

HCLTech is seeking a DevSecOps Engineer to strengthen security across our software development lifecycle, spanning cloud and on‑prem environments. You will implement robust security controls, automate checks in Azure DevOps, and work with Python and Linux scripting to streamline secure delivery for global clients.

HCLTech offers ongoing training, certifications, and mentorship to develop technical and leadership skills while contributing to secure, innovative technology solutions for clients

Qualifications

• Bachelor's degree or higher in CS/InfoSec or related field.
• Experience in DevSecOps, App Security, or Infra Security is required.
• Proficiency in Python and Linux scripting is essential.
• Experience with SAST/DAST and vulnerability management.
• Hands-on experience integrating security controls into CI/CD pipelines (Azure DevOps).

Responsibilities

• Develop, implement, and maintain DevSecOps processes to ensure secure code delivery and infrastructure protection.
• Conduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify and remediate vulnerabilities.
• Manage and prioritize vulnerability findings, collaborating with development and operations teams to resolve security issues.
• Integrate security controls and automated checks into Azure DevOps pipelines, streamlining secure software delivery.
• Utilize Python and Linux Shell scripting to automate security processes and enhance operational efficiency.
• Apply best practices in Application Security and Infrastructure Security across multiple environments.
• Monitor, report, and respond to security threats, ensuring compliance with industry standards and corporate policies.
• Stay current with emerging security trends, tools, and technologies, proactively recommending improvements.

Skills

DevSecOps

Application Security

Infrastructure Security

Python

Linux Shell

SAST

DAST

Vulnerability Management

Azure DevOps pipelines

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Azure DevOps

Terraform

Ansible

Job description

HCLTech is a global leader in technology solutions, renowned for its innovation, customer‑centric approach, and commitment to excellence. With a presence in over 50 countries and a workforce of more than 220,000 professionals, HCLTech delivers cutting‑edge services across IT, engineering, and digital transformation. The company is dedicated to driving progress, fostering diversity, and building sustainable solutions for clients worldwide, consistently earning industry accolades for its pioneering advancements and ethical standards.

The DevSecOps Engineer will play a critical role in enhancing the security posture of HCLTech’s applications and infrastructure. This position is responsible for integrating robust security controls throughout the software development lifecycle, ensuring that both cloud and on‑premise solutions meet the highest security standards. The role is pivotal in safeguarding HCLTech’s digital assets and supporting the company’s mission to deliver secure, innovative technology solutions to global clients.

DETAILED RESPONSIBILITIES

• Develop, implement, and maintain DevSecOps processes to ensure secure code delivery and infrastructure protection.
• Conduct Static Application Security Testing (SAST) and Dynamic Application Security Testing (DAST) to identify and remediate vulnerabilities.
• Manage and prioritize vulnerability findings, collaborating with development and operations teams to resolve security issues.
• Integrate security controls and automated checks into Azure DevOps pipelines, streamlining secure software delivery.
• Utilize Python and Linux Shell scripting to automate security processes and enhance operational efficiency.
• Apply best practices in Application Security and Infrastructure Security across multiple environments.
• Monitor, report, and respond to security threats, ensuring compliance with industry standards and corporate policies.
• Stay current with emerging security trends, tools, and technologies, proactively recommending improvements.

SKILL REQUIREMENTS

• Extensive experience in DevSecOps, Application Security, or Infrastructure Security.
• Strong proficiency in Python and Linux Shell scripting.
• Hands‑on expertise in SAST, DAST, and Vulnerability Management.
• Thorough understanding of Application Security and Infrastructure Security principles.
• Proven experience integrating security controls into Azure DevOps pipelines.
• Bachelor’s degree in Computer Science, Information Security, or related field; relevant certifications (e.g., CISSP, CEH, Azure Security Engineer) are advantageous.

OTHER REQUIREMENTS (OPTIONAL)

• Knowledge of AI Security, including LLM security risks and secure AI application development.
• Experience securing Kubernetes, containers, and Infrastructure as Code (Terraform preferred).
• Familiarity with cloud security, especially Microsoft Azure.
• Proficiency with container and cloud security tools.
• Experience using Ansible scripts for automation.

CAREER DEVELOPMENT OPPORTUNITIES

HCLTech offers a dynamic environment with ample opportunities for professional growth. Employees benefit from tailored training programs, certifications, and mentorship initiatives designed to advance technical and leadership skills. The company encourages internal mobility, enabling talented professionals to explore diverse roles across global projects. As part of HCLTech’s commitment to employee development, you’ll have access to industry‑leading resources, continuous learning platforms, and a supportive culture that empowers you to reach your full potential and contribute meaningfully to the organization’s success.