Dev Secops Engineer

Solaire Resort; Philippines; On-site; PHP 1,200,000 - 1,800,000; Full time

Job summary

Solaire Resort is seeking a Dev SecOps Engineer to integrate automated security testing into CI/CD pipelines and enforce security gates before deployment.

The role requires hands-on experience with containerization, IaC (Terraform), and cloud security across AWS/Azure/GCP. You’ll collaborate with development teams to embed secure coding practices and manage secrets centrally.

Qualifications

• Bachelor’s degree in computer science, engineering, or a related field.

Responsibilities

• Integrate automated security testing into CI/CD pipelines with gates.

Skills

CI/CD experience

Secure coding

Python scripting

Bash scripting

Education

Bachelor’s degree in computer science/Engineering

Tools

Jenkins

GitLab CI

GitHub Actions

SonarQube

Snyk

Trivy

OWASP ZAP

Docker

Kubernetes

Terraform

AWS

Azure

GCP

HashiCorp Vault

Job description

Dev SecOps Engineer

Company : Solaire Resort Job Type : Full Time Philippines

Job Description - Dev SecOps Engineer

Duties and Responsibilities

• Integrate automated
  security testing (SAST, DAST, SCA, container and image scanning) into CI/CD
  pipelines, enforcing security gates before deployment.
• Define and maintain
  security-as-code and policy-as-code controls, including infrastructure as
  code (IaC) scanning for cloud and on-premises environments.
• Harden container
  and orchestration platforms such as Docker and Kubernetes, enforcing
  least-privilege access, image signing, and runtime security controls.
• Manage secrets,
  credentials, and certificates through centralized secrets management,
  eliminating hard-coded credentials across pipelines and services.
• Monitor, triage,
  and prioritize vulnerabilities across code, dependencies, images, and
  infrastructure, driving remediation with development teams against defined
  SLAs.
• Automate security
  baseline enforcement and compliance evidence collection across cloud and
  on-premises environments.
• Collaborate with
  development teams to embed secure coding practices, threat modeling, and
  security requirements early in the development cycle.
• Support incident
  response and post-incident reviews for security events affecting pipelines,
  infrastructure, and workloads, driving root-cause remediation.
• Continuously
  improve security tooling coverage and accuracy, reducing false positives and
  mean time to remediate.
• Participate in the on-call rotation to support
  production systems.
  

Key Performance Indicators/ Key Success Factors

• Percentage of CI/CD pipelines with enforced
  security gates (SAST/DAST/SCA coverage).
• Mean time to remediate (MTTR) critical and
  high-severity vulnerabilities.
• Reduction in vulnerabilities reaching
  production.
• Compliance with security baselines across
  cloud and on-premises environments.
• Secrets management coverage, with zero
  hard-coded credentials in code and pipelines.
  

Requirements

• Education: Bachelor’s degree in computer science, Engineering, or a
  related field, or equivalent practical experience.
• Experience: 3+ years in a DevSecOps, DevOps, or security engineering
  role, ideally supporting high-availability, real-time platforms such as
  online gaming.
• Skills & Knowledge: Proficiency with CI/CD tools (Jenkins, GitLab CI,
  GitHub Actions), security scanning tools (SonarQube, Snyk, Trivy, OWASP ZAP),
  containerization/orchestration (Docker, Kubernetes), infrastructure as code
  (Terraform), cloud platforms (AWS/Azure/GCP), secrets management (HashiCorp
  Vault), and scripting (Python, Bash).
• Certifications (good to have): Certified Kubernetes Security Specialist (CKS),
  AWS Certified Security – Specialty, GIAC Cloud Security Automation (GCSA), or
  CISSP preferred.