DevSecOps

Seven Seven Global Services, Inc.; Makati; On-site; PHP 900,000 - 1,700,000; Full time

Job summary

Seven Seven Global Services, Inc. is seeking a DevOps Security Engineer to weave security into our CI/CD pipelines and cloud platforms. You will automate security controls, manage IaC, and enhance observability across our software delivery lifecycle.

You will collaborate with development, operations, and security teams, participate in Agile ceremonies, and help drive security training and best practices across the team. The role focuses on continuous improvement of security processes.

Qualifications

• Experience implementing security into the DevOps lifecycle.
• Proficient in CI/CD security, vulnerability testing and code reviews.
• Familiarity with IaC tools and cloud platforms.

Responsibilities

• Security Integration: embed security into the DevOps lifecycle across development to deployment.
• Automation & IaC: automate controls and maintain IaC with Terraform/Ansible/CloudFormation.
• Monitoring & Incident Response: implement monitoring, incident response, and root cause analysis.

Skills

DevOps

Observability

Platform Engineering

Cloud Engineering

Tools

GitLab

Grafana

Loki

Tempo

Mimir

Helm

Kubernetes

GCP

ArgoCD

Job description

Key Responsibilities:

• Security Integration: Implement security practices into the DevOps lifecycle from development to deployment. Maintain security tools and processes within CI/CD pipelines, enforcing pipeline security standards, code reviews, and vulnerability testing.
• Automation & IaC: Automate security controls, governance, and compliance validation. Develop and maintain Infrastructure as Code (IaC) using tools like Terraform, Ansible, or CloudFormation to improve efficiency and reduce errors.
• Monitoring & Incident Response: Implement and manage monitoring/logging solutions to detect threats. Establish incident response procedures, conduct regular drills, assist during security incidents, and perform root cause analysis.
• Collaboration & Communication: Work with developers, operations, and security teams to integrate security seamlessly. Participate in Agile ceremonies and provide security training/awareness for dev and ops teams.
• Continuous Improvement: Update security practices based on industry trends and threat intelligence. Refine DevOps processes and standards continuously.

Required Knowledge & Experience:

• Tools: GitLab, Grafana, Loki, Tempo, Mimir, Helm, Kubernetes, GCP, ArgoCD
• Skills: DevOps, Observability, Platform Engineering, Cloud Engineering