DevSecOps Engineer - AWS Security & CI/CD (Hybrid)

Cloudstaff Philippines Inc.; Metro Manila; Hybrid; PHP 900,000 - 1,400,000; Full time

Benefits offered by this job

Comprehensive health and life保险 on 16?

Up to 24 leave credits per year

Flexible leave credits for vacation,;s

Career advancement opportunities

Company-provided PC/Laptop and fiber

Weekly office perks: coffee, meals, BE

Annual Performance Review with Salary+

Employee Share Units program

Cloudstaff Dream Points

VIP lounge and game rooms

Child friendly spaces

Lifeworks Mental Wellness support

In-house psychiatrist available

CS Social Clubs

Flexible office environment

ATM inside office

Disaster recovery readiness

Job summary

Cloudstaff Philippines Inc. is seeking a DevSecOps Engineer to lead cloud security and platform engineering for our AWS environment. The role emphasizes hardening security, IaC with Terraform, and supporting secure delivery of in-house applications.

You will define secure SDLC practices, stand up GitHub Enterprise with CI/CD pipelines, and collaborate across teams to ensure robust security posture in a hybrid work setup.

Qualifications

• Demonstrated experience engineering and hardening production AWS environments.
• Hands-on IaC with Terraform and patching with AWS Systems Manager.
• Knowledge of AWS security services: Security Hub, GuardDuty, CloudTrail, Identity Center, Secrets Manager.
• Experience building CI/CD pipelines with SAST/DAST/SCA and secrets detection.
• Understanding of secure SDLC, GitHub source control, and engineering docs in English.

Responsibilities

• Harden AWS platform and CIS Benchmark alignment; manage IAM keys and security groups.
• Migrate IAM keys to Secrets Manager; enable SSO through AWS Identity Center to Entra ID.
• Enable GuardDuty, CloudTrail data events; forward to SIEM for detection.
• Define secure SDLC practices and CI/CD tooling with SAST/DAST/SCA.
• Maintain IaC with Terraform and manage workload patching via AWS Systems Manager.
• Support disaster recovery with immutability backups and proper IaC.

Skills

AWS Security

Cloud fundamentals

Security documentation

English proficiency

Education

Relevant tertiary qualification in software engineering, cloud computing, cyber security

Tools

Terraform

AWS Config

GuardDuty

CloudTrail

Secrets Manager

AWS Identity Center

AWS Backup

GitHub Enterprise

GitHub Actions

Security Hub

Microsoft Defender for Cloud

Job description

Cloudstaff Philippines Inc. is seeking a DevSecOps Engineer to lead cloud security and platform engineering for our AWS environment. The role emphasizes hardening security, IaC with Terraform, and supporting secure delivery of in-house applications.

You will define secure SDLC practices, stand up GitHub Enterprise with CI/CD pipelines, and collaborate across teams to ensure robust security posture in a hybrid work setup.