Cybersecurity - DevSecOps

Thales; Otago; On-site; NZD 110,000 - 190,000; Full time

Job summary

Thales is seeking a Cybersecurity DevSecOps Engineer to support secure system lifecycles across IT/OT environments. You will automate security controls, enforce hardening, and configure audit logs for compliance with ISO 27001, NIST, and regional frameworks.

You will work with DevOps, SOC, and IT Operations teams to strengthen vulnerability management, threat detection, and incident response. Strong experience in CIS Benchmarks and recovery from vulnerabilities is essential.

Qualifications

• Degree in Engineering, Computer Science or related discipline majoring in Cybersecurity or relevant industry experience
• 5+ years of proven experience in the Cybersecurity field
• Strong knowledge in Cybersecurity solutions (e.g. IAM, PAM, SIEM, EDR, Keys, Firewall)
• Demonstrated ability to achieve effective outcomes in a multidiscipline, multi-culture environment
• Experience in system hardening and hardening review based on CIS Benchmarks or DISA STIG frameworks.

Responsibilities

• Vulnerability Management: understand scan reports, identify, assess and remediate vulnerabilities to reduce exposure.
• Configuration Auditing: ensure host configurations against CIS Benchmarks, STIGs and Thales hardening standards.
• SIEM & Monitoring: tune and optimise QRadar and Splunk rules, align with MITRE ATT&CK and threat intel feeds.
• Governance & Compliance: monitor adherence to ISO 27001, NIST, ITIL and regional standards; maintain audit evidence.
• Integration and Hardening: apply CIS-based configurations to COTS products, verify hardened states.
• Auditing & Monitoring: ensure secure configuration, monitor for threats and validate fixes.
• On-Call Support: provide when required to Thales’ customers.

Job description

Role Description

TheCybersecurity DevSecOps Engineerat Thales plays an important rolein integratingsecurity into the system lifecycle, ensuringsecure, compliant and resilientsystems. This role focuses onvulnerability management, configuration audits, compliance monitoring, and threat detectionto mitigate risks across Thales’IT and OT environments.

The Cybersecurity DevSecOps Engineer willcollaborate with cross-functional teams(DevOps, SOC, IT Operations) toautomate security controls, enforce hardening standards and security audit log configuration, correlation and alert rules, ensuring adherence to global and regional compliance frameworks(e.g.,ISO 27001, NIST, Singapore’s CCoP, ICT&SS).

Skills, Responsibilities and Activities

Vulnerability Management.

Skills include: be able to understand vulnerability scan reports to be able to identify, assess and remediate security vulnerabilities to reduce exposure to cyber threats.

Activities include:

• Vulnerability Analysis & Prioritization: Processscan reports(using tools such as Nessus, Nmap, Trivy) to identifycritical/high-severity vulnerabilities.
• Assess risks usingCVSS, EPSS, KEV, SSVCmethodologies, prioritising remediation based onbusiness impact and exploitability.
• Remediation Support: Collaborate with the relevant engineering teamsto applypatches, workarounds, or mitigations.
• Validatefix effectivenessand track remediation progress

Reporting & Documentation.

Skills: be able to draftclear, actionable reportssummarizing:

• Vulnerability details (CVE, affected systems, risk level).
• Recommendedhardening rulesorcorrective actions.
• Risk analysis(likelihood, impact, business context).
• Present findings to stakeholders (IT, Security, Management).

Audit& Monitoring.

Skills include ensuring systems aresecurely configuredandmonitoredfor threats. Activities include

• Configuration Compliance Reviews. Validation of host configurations(RHEL, Windows, Databases, Network Equipment) against:
• CIS Benchmarks
• Thales-specific hardening standards
• Other standards as required ie STIGs (Security Technical Implementation Guides)
• Identifymisconfigurationsand recommendcorrective actions.

Integration and Hardening.

Skills include ability to integrate, applying hardening benchmarks as well as customized hardening configurations to COTS products (Operating systems & network equipment) and verification of hardened configurations. Activities include:

• Selecting hardening frameworks CIS, defining custom configurations for the environment
• Application of customised hardening using automation tools
• Integration and verification of Cyber requirements for Cyber COTS (such as IAM, PAM, SIEM, EDR,EPP, Keys management, Firewall)
• Verification of hardening baseline during vulnerability scans and test campaigns

SIEM Log Enhancement and Analysis.

Skills includes Audit log tuning, analysis and acknowledge of alert frameworks. Activities include:

• Advise onlogging improvementsfor betterthreat detection(e.g.,missing logs, false positives/negatives).
• Support SIEM rule tuning, advising on the optimisation ofcorrelation rules to enhancealert accuracyinQRadar/Splunk,reducingfalsepositivesand improvingthreat detection.
• Align rules withMITRE ATT&CK frameworkandthreat intelligence feeds.
• Analysis ofSIEM/SOC alertsto determine:
• Legitimacy(true positive vs. false positive).
• Severity(usingMITRE ATT&CKfor classification).
• Required actions(containment, remediation, escalation).

Governance & Compliance.

Skills include knowledge of regulatory and internal security standards, ensuring their adherence. Activities include:

• Compliance Monitoring, trackingadherence to frameworks such as:
• Global:ISO 27001, NIST, ITIL
• Regional (Singapore):CCoP (Cybersecurity Code of Practice), ICT&SS (Infocomm Technology & Security Standards)
• Maintainingaudit evidencefor compliance assessments.
• Standards &Policy Support, assisting insecurity standards change analysis(e.g., updates toCIS, STIGs, or Thale’s policies).
• EnsuringDevSecOps practices alignwithcorporate governancerequirements.
• Risk & Gap Analysis, identifyinggapsbetweencurrent stateandrequired compliancelevels.
• Proposemitigation strategiesto close gaps.

On-Call Support.

Activities Include:

• Provide on-call support as required to the customer when restored.

Technical Skills, Qualifications & Experience

Technical Skills

Vulnerability Management : Nessus, Nmap, Trivy, CVSS, EPSS, KEV, SSVC

Configuration Auditing : STIGs, CIS Benchmarks, SCAP, OpenSCAP

SIEM & Monitoring : QRadar, Splunk, ELK, MITRE ATT&CK, Threat Intelligence

Scripting & Automation : Python, Bash, PowerShell (for report automation)

Compliance Frameworks : ISO 27001, NIST, ITIL, CCoP, ICT&SS

Cloud & Infrastructure : RHEL, Windows Server, Databases (Oracle, SQL), Network Devices

DevSecOps Tools : Jenkins, GitLab CI/CD, Ansible, Terraform (for IaC security)

Soft Skills

• Analytical Thinking: Ability tointerpret scan reports, logs, and compliance gaps.
• Stakeholder Communication: Clearreportingandcollaborationwithnon-security teams.
• Problem-Solving: Proactive inidentifying and mitigating risks.
• Attention to Detail: Ensureaccuracy in audits, reports, and remediation tracking.

A positive attitude combined with excellent interpersonal and motivational skills.

Sound judgement and independent decision-making capability where necessary

Excellent written and oral communication skills in English

Qualifications

• Degree in Engineering, Computer Science or related discipline majoring in Cybersecurity or relevant industry experience

Essential Experience

• 5+ years of proven experience in the Cybersecurity field
• Strong knowledge in Cybersecurity solutions (e.g. IAM, PAM, SIEM, EDR, Keys, Firewall)
• Demonstrated ability to achieve effective outcomes in a multidiscipline, multi-culture environment
• Experience in system hardening and hardening review based on CIS Benchmarks or DISA STIG frameworks.

Desirable:

• Industry qualifications, such as CISSP
• Postgraduate studies in Cybersecurity
  General / Special Requirements
  • Assist in ensuring a harmonious work environment in all departments that you are working with by upholding Thales' key values.
  • An advocate for diversity and inclusion who will be actively involved in implementing change initiatives to achieve our diversity goals
  • An advocate for a culture of continuous improvement
  • An advocate for Accountability, transparency and curiosity
  • Comply with all relevant company Occupational Health, Safety and Environmental policies and framework and work practices with the intent of preventing or minimising accidental exposures to self, colleagues, visitors and/or the environment and to ensure a safe work practises at all times.
  • Comply with all relevant Company policies and procedures.
  • Occasional international travel may be required
  SPECIAL REQUIREMENTS:
  • Eligible to obtain Singapore CAT2 Clearance