Senior DevSecOps Security Engineer

Hytech; Kuala Lumpur; On-site; MYR 180,000 - 320,000; Full time

Benefits offered by this job

Public transport access

Professional development

Insurance coverage

Job summary

Hytech in Kuala Lumpur is seeking a Senior DevSecOps Security Engineer to implement security architecture across AWS, IAM/PAM, KMS/Secrets, and CI/CD security for fintech engagements.

You will work with DevOps, Infrastructure and R&D teams to advance security automation, AI-assisted reviews, and secure software supply chains, ensuring strong governance over credentials and deployment pipelines.

Qualifications

• 6+ years of experience in DevSecOps, cloud security, security engineering, or related fields.
• Familiarity with AWS security capabilities including IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub, and Security Groups.
• Strong experience in IAM/PAM, KMS/Secrets, cloud network security, CI/CD security, container security, or database access governance.
• Hands-on experience with Terraform / IaC, Python / Shell, CI/CD pipelines, or security automation.
• Good understanding of least privilege, credential lifecycle, production access auditing, security baselines, and security gates.
• Strong AI capability, with the ability to improve security engineering efficiency using AI and validate AI-generated scripts and remediation recommendations.
• Understanding of sensitive information protection when using AI, avoiding non-compliant AI tools for secrets or production data.

Responsibilities

• Implement AWS multi-account security baselines including CloudTrail, GuardDuty, Security Hub and AWS Config.
• Support IAM/PAM, JumpServer, Archery, break-glass access, SSH key, production and database access governance.
• Implement KMS, Secrets Manager, access key, token, certificate, and key rotation controls.
• Govern Security Groups, NACLs, VPC segmentation, public exposure, egress control, and network drift.
• Implement CI/CD security practices with Jenkins, ArgoCD, Bitbucket, SAST, SCA, IaC scanning and SBOM.
• Use Terraform, Python, CI/CD scripting and security tools to automate detection, remediation guidance, and dashboards.
• Integrate AI into daily DevSecOps workflows and AI-assisted reviews.
• Collaborate with DevOps, Infrastructure, R&D and DBA teams to drive remediation.

Skills

DevSecOps

Cloud security

IAM/PAM

CI/CD security

Security automation

Python / Shell

Terraform / IaC

AI in security

Tools

Jenkins

ArgoCD

Bitbucket

Kubernetes

Terraform

Vault / Secrets Manager

Job description

Hytech is a leading management consulting firm headquartered in Australia and Singapore, specialising in digital transformation for fintech and financial services organisations. We deliver end-to-end consulting services and provide robust middle- and back-office solutions that enable our clients to optimise operations, enhance efficiency, and stay ahead in a fast-evolving digital landscape.

With more than 2,000 professionals worldwide, Hytech has a strong and growing international presence, with offices across Australia, Singapore, Malaysia, Taiwan, the Philippines, Thailand, Morocco, Cyprus, Dubai, and beyond.

About Role

We are hiring Senior DevSecOps Security Engineers to implement security architecture and standards across AWS, IAM/PAM, KMS/Secrets, Security Groups, JumpServer, Archery, CI/CD, and software supply chain security.

This role is suitable for senior security engineers with experience in cloud security, platform security, security automation, CI/CD security, or identity and access governance. Candidates must have strong AI capability and be able to use AI to improve configuration review, script generation, log analysis, IAM policy review, vulnerability analysis, CI/CD review, and automation efficiency.

Key Responsibilities

• Implement AWS multi-account security baselines, including CloudTrail, GuardDuty, Security Hub, AWS Config, SCP, account onboarding, and baseline drift detection.
• Support IAM/PAM, JumpServer, Archery, break‑glass access, SSH key, production access, and database access governance.
• Implement KMS, Secrets Manager, access key, token, certificate, and key rotation controls.
• Govern Security Groups, NACLs, VPC segmentation, public exposure, egress control, and network drift.
• Implement Jenkins, ArgoCD, Bitbucket, SAST, SCA, IaC scanning, secrets scanning, SBOM, and pipeline security gates.
• Use Terraform, Python, CI/CD, scripting, or security tools to automate detection, remediation guidance, and dashboards.
• Use AI to generate scripts, analyse configuration risks, review IAM policies, review Terraform/CI/CD configurations, produce remediation recommendations, summarise baseline gaps, and prepare risk summaries.
• Integrate AI into daily DevSecOps workflows, such as AI‑assisted IaC Review, AI‑assisted IAM Review, and AI‑assisted CI/CD Security Review.
• Partner with DevOps, Infrastructure, R&D, and DBA teams to drive remediation and process improvement.
• Support incident recovery through credential cleanup, account hardening, network exposure reduction, CI/CD hardening, and control restoration.
• Work with SOC, Red Team, and GRC to ensure controls can be monitored, validated, and reviewed.

Requirements

• 6+ years of experience in DevSecOps, cloud security, security engineering, platform security, or application security.
• Familiarity with AWS security capabilities including IAM, VPC, KMS, CloudTrail, GuardDuty, Security Hub, and Security Groups.
• Strong experience in at least two of the following areas: IAM/PAM, KMS/Secrets, cloud network security, CI/CD security, container security, or database access governance.
• Hands‑on experience with Terraform / IaC, Python / Shell, CI/CD pipelines, or security automation.
• Good understanding of least privilege, credential lifecycle, production access auditing, security baselines, and security gates.
• Strong AI capability, with the ability to improve security engineering efficiency using AI and validate AI‑generated scripts, policies, configuration analysis, and remediation recommendations.
• Understanding of sensitive information protection when using AI, avoiding the use of non‑compliant AI tools for secrets, production data, customer information, or unmasked logs.
• Ability to work with DevOps, R&D, Infrastructure, and DBA teams to drive remediation.
• Strong analytical, documentation, and execution skills.

Preferred Qualifications

• Experience with Jenkins, ArgoCD, Bitbucket, Kubernetes, Terraform, Vault, or Secrets Manager.
• Experience implementing SAST, SCA, IaC scanning, secrets scanning, SBOM, or container image scanning.
• Experience with AI‑assisted DevSecOps, AI‑assisted IaC review, or AI‑assisted CI/CD security review.
• Experience in fintech, payments, trading platforms, Web3, or large‑scale cloud platform security.
• Experience in incident recovery, access reduction, credential rotation, or CI/CD hardening.

What We Offer

• Easy access to public transportation (LRT & KTM).
• Corporate insurance coverage, including dental, optical, and outpatient claims.
• Gym and fitness claims.
• Ongoing training and development opportunities.
• Exposure to exciting projects that support career growth and professional development.