Senior Cloud Vulnerability & DevSecOps Lead

Maybank; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Job summary

Maybank is seeking a Senior Cloud Vulnerability & DevSecOps specialist to lead vulnerability management across Azure and AWS. You will drive remediation, integrate security controls into CI/CD pipelines, and align with regulatory standards while mentoring junior staff.

You will partner with Security Operations, Risk, and Engineering to strengthen cloud security posture and DevSecOps maturity across the enterprise.

Qualifications

• Bachelor degree or equivalent in a technical field.
• Minimum 5 years in penetration testing, 2-3 years cloud focus.
• Experience in cloud platforms: AWS, Azure, GCP.
• Hands-on with CI/CD tools (Jenkins, GitLab CI, GitHub Actions, CircleCI).
• Experience in regulated environments (banking/telecom/finance) is advantageous.
• Strong knowledge of IAM, cloud networking, compute, containers, logging.

Responsibilities

• Manage end-to-end vulnerability management for Azure and AWS.
• Prioritize risks and coordinate remediation with Cloud/DevOps teams.
• Define and track remediation SLAs, exceptions, and risk plans.
• Integrate security controls into CI/CD pipelines (SAST/DAST/ SCA).
• Support SBOMs, provenance, code signing, open-source governance.
• Ensure alignment with policies, standards and regulations.
• Produce dashboards on cloud vuln risk and DevSecOps maturity.
• Collaborate with Security Operations, Risk, and Eng teams to improve posture.
• Support secure IAM configuration and identity automation.
• Keep updated on cloud tech and best practices.

Skills

Cloud security

Penetration testing

IAM

Cloud networking

Kubernetes

Scripting

Education

Bachelor degree in Business/CS/InfoSec/Cybersecurity

Tools

Jenkins

GitLab CI

GitHub Actions

CircleCI

Pacu

ScoutSuite

Prowler

Burp Suite

Nmap

Terraform

CloudFormation

Job description

Maybank is seeking a Senior Cloud Vulnerability & DevSecOps specialist to lead vulnerability management across Azure and AWS. You will drive remediation, integrate security controls into CI/CD pipelines, and align with regulatory standards while mentoring junior staff.

You will partner with Security Operations, Risk, and Engineering to strengthen cloud security posture and DevSecOps maturity across the enterprise.