Senior DevSecOps Engineer: Secure CI/CD & Cloud Risk

Cloud Kinetics; Selangor; On-site; MYR 120,000 - 160,000; Full time

Job summary

Cloud Kinetics is seeking a Senior Executive, DevSecOps Engineering to own security controls across the SDLC, embedding secure-by-default CI/CD pipelines and automated gates. You will collaborate with engineering, cloud, infrastructure, cybersecurity, risk, and compliance teams to reduce risk in hybrid AWS environments.

The role emphasizes threat modelling, secure coding, automated testing (SAST/DAST/SCA), and SBOM provenance, with emphasis on least privilege, auditability, and traceability in

Qualifications

• 3+ years in DevSecOps or secure CI/CD across hybrid environments.
• Experience embedding automated security testing into build, test, release, and deployment pipelines.
• Experience securing AWS services, identities, networks, containers, serverless workloads, and infrastructure-as-code.
• Experience triaging vulnerabilities, coordinating remediation, and producing evidence for security reviews and audits.
• Collaboration across engineering, security, risk, compliance, and operations teams to promote security-by-design.

Responsibilities

• Define security and privacy requirements during planning and architecture; facilitate threat modelling and risk reviews.
• Establish secure coding standards, reusable pipeline templates, and branch protections aligned with OWASP.
• Integrate SAST, DAST, SCA, secrets detection, API security testing, and container scanning into pipelines.
• Implement risk-based pipeline gates with approval workflows for exceptions.
• Secure source, runners, build systems, dependencies, artifacts, registries, and deployment workflows.
• Triage findings, remove false positives, track remediation SLAs, verify fixes, and report exposure.
• Apply secure baselines and policy-as-code to AWS, Terraform, Ansible, CloudFormation, Docker, and serverless services.
• Prevent credentials in code/pipelines; manage secrets and short-lived credentials.
• Maintain traceable approvals, immutable artifacts, controlled environment promotion, and release evidence.

Skills

DevSecOps

App security

Cloud security

Python

CI/CD automation

Threat modelling

OWASP practices

Tools

AWS

Terraform

Ansible

CloudFormation

Docker

Job description

Cloud Kinetics is seeking a Senior Executive, DevSecOps Engineering to own security controls across the SDLC, embedding secure-by-default CI/CD pipelines and automated gates. You will collaborate with engineering, cloud, infrastructure, cybersecurity, risk, and compliance teams to reduce risk in hybrid AWS environments.

The role emphasizes threat modelling, secure coding, automated testing (SAST/DAST/SCA), and SBOM provenance, with emphasis on least privilege, auditability, and traceability in