Senior DevSecOps Security Engineer

Hytech Consulting Management Sdn Bhd; Kuala Lumpur; On-site; MYR 180,000 - 240,000; Full time

Benefits offered by this job

Public transport access

Insurance coverage

Gym and fitness claims

Training and development

Job summary

Hytech Consulting Management Sdn Bhd in Kuala Lumpur is seeking Senior DevSecOps Security Engineers to implement security architecture across AWS, IAM/PAM, KMS/Secrets, Security Groups, JumpServer, Archery, CI/CD, and software supply chain security.

This role is suitable for senior security engineers with cloud security, platform security, security automation, CI/CD security, or identity and access governance.

Qualifications

• 6+ years in DevSecOps, cloud security, or related fields.
• Familiar with AWS IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub.
• Experience in at least two areas: IAM/PAM, KMS/Secrets, cloud security, CI/CD security, container security, or database access governance.
• Hands-on with Terraform / IaC, Python or Shell, CI/CD pipelines, or security automation.
• Understanding of least privilege, credential lifecycle, production access auditing, security baselines and gates.
• Strong AI capability to improve security engineering efficiency.
• Ability to collaborate with DevOps, R&D, Infrastructure and DBA teams.

Responsibilities

• Implement AWS multi-account security baselines, including CloudTrail, GuardDuty, Security Hub, Config, SCP onboarding.
• Govern IAM/PAM, JumpServer, Archery, break-glass access, and production/database access governance.
• Implement KMS, Secrets Manager, access key, token, certificate, and key rotation controls.
• Govern Security Groups, NACLs, VPC segmentation, egress control, and network drift.
• Implement Jenkins, ArgoCD, Bitbucket, SAST, SCA, IaC scanning, secrets scanning, SBOM, and pipeline security gates.
• Use Terraform, Python, CI/CD, scripting, or security tools to automate detection and dashboards.
• Use AI to generate scripts, analyze configuration risks, review IAM policies, remediation recommendations.
• Integrate AI into AI-assisted DevSecOps workflows, such as AI-assisted IaC Review and CI/CD Security Review.
• Partner with DevOps, Infrastructure, R&D, and DBA teams to drive remediation.
• Support incident recovery through credential cleanup, account hardening, and network exposure reduction.
• Work with SOC, Red Team, and GRC to ensure controls can be monitored and reviewed.

Skills

DevSecOps

Cloud security

Security engineering

Platform security

IAM/PAM

KMS/Secrets

CI/CD security

AI capability

Tools

Terraform

Python

CI/CD tools

Job description

Hytech is a leading management consulting firm headquartered in Australia and Singapore, specialising in digital transformation for fintech and financial services organisations. We deliver end-to-end consulting services and provide robust middle- and back-office solutions that enable our clients to optimise operations, enhance efficiency, and stay ahead in a fast-evolving digital landscape.

With more than 2,000 professionals worldwide, Hytech has a strong and growing international presence, with offices across Australia, Singapore, Malaysia, Taiwan, the Philippines, Thailand, Morocco, Cyprus, Dubai, and beyond.

About Role

We are hiring Senior DevSecOps Security Engineers to implement security architecture and standards across AWS, IAM/PAM, KMS/Secrets, Security Groups, JumpServer, Archery, CI/CD, and software supply chain security.

This role is suitable for senior security engineers with experience in cloud security, platform security, security automation, CI/CD security, or identity and access governance. Candidates must have strong AI capability and be able to use AI to improve configuration review, script generation, log analysis, IAM policy review, vulnerability analysis, CI/CD review, and automation efficiency.

Key Responsibilities

• Implement AWS multi-account security baselines, including CloudTrail, GuardDuty, Security Hub, AWS Config, SCP, account onboarding, and baseline drift detection.
• Support IAM/PAM, JumpServer, Archery, break-glass access, SSH key, production access, and database access governance.
• Implement KMS, Secrets Manager, access key, token, certificate, and key rotation controls.
• Govern Security Groups, NACLs, VPC segmentation, public exposure, egress control, and network drift.
• Implement Jenkins, ArgoCD, Bitbucket, SAST, SCA, IaC scanning, secrets scanning, SBOM, and pipeline security gates.
• Use Terraform, Python, CI/CD, scripting, or security tools to automate detection, remediation guidance, and dashboards.
• Use AI to generate scripts, analyze configuration risks, review IAM policies, review Terraform / CI/CD configurations, produce remediation recommendations, summarize baseline gaps, and prepare risk summaries.
• Integrate AI into daily DevSecOps workflows, such as AI-assisted IaC Review, AI-assisted IAM Review, and AI-assisted CI/CD Security Review.
• Partner with DevOps, Infrastructure, R&D, and DBA teams to drive remediation and process improvement.
• Support incident recovery through credential cleanup, account hardening, network exposure reduction, CI/CD hardening, and control restoration.
• Work with SOC, Red Team, and GRC to ensure controls can be monitored, validated, and reviewed.

Requirements

• 6+ years of experience in DevSecOps, cloud security, security engineering, platform security, or application security.
• Familiarity with AWS security capabilities including IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub, and Security Groups.
• Strong experience in at least two of the following areas: IAM/PAM, KMS/Secrets, cloud network security, CI/CD security, container security, or database access governance.
• Hands-on experience with Terraform / IaC, Python / Shell, CI/CD pipelines, or security automation.
• Good understanding of least privilege, credential lifecycle, production access auditing, security baselines, and security gates.
• Strong AI capability, with the ability to improve security engineering efficiency using AI and validate AI-generated scripts, policies, configuration analysis, and remediation recommendations.
• Understanding of sensitive information protection when using AI, avoiding the use of non-compliant AI tools for secrets, production data, customer information, or unmasked logs.
• Ability to work with DevOps, R&D, Infrastructure, and DBA teams to drive remediation.
• Strong analytical, documentation, and execution skills.

Preferred Qualifications

• Experience with Jenkins, ArgoCD, Bitbucket, Kubernetes, Terraform, Vault, or Secrets Manager.
• Experience implementing SAST, SCA, IaC scanning, secrets scanning, SBOM, or container image scanning.
• Experience with AI-assisted DevSecOps, AI-assisted IaC review, or AI-assisted CI/CD security review.
• Experience in fintech, payments, trading platforms, Web3, or large-scale cloud platform security.
• Experience in incident recovery, access reduction, credential rotation, or CI/CD hardening.

What We Offer

• Easy access to public transportation (LRT & KTM).
• Corporate insurance coverage, including dental, optical, and outpatient claims.
• Gym and fitness claims.
• Ongoing training and development opportunities.
• Exposure to exciting projects that support career growth and professional development.