DevSecOps Engineer for Secure, High-Availability iGaming

SmartConsulting.net; Manila; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

SmartConsulting.net is seeking a DevSecOps Engineer to embed security into the software delivery lifecycle for a gaming platform. You will integrate automated security controls into CI/CD pipelines, define security-as-code, and Harden containers and orchestration with Docker and Kubernetes.

You will manage secrets, monitor vulnerabilities, and collaborate with development teams to drive secure coding practices, incident response, and continuous security improvements.

Qualifications

• Bachelor's degree or equivalent practical experience in a related field.
• 3+ years in a DevSecOps, DevOps, or security engineering role.
• Proficiency with CI/CD tools, security testing, and IaC practices.

Responsibilities

• Integrate automated security testing (SAST, DAST, SCA) into CI/CD pipelines.
• Define and maintain security-as-code and policy-as-code controls including IaC scanning.
• Harden Docker and Kubernetes with least-privilege access and image signing.
• Manage secrets, credentials, and certificates via centralized secrets management.
• Monitor and triage vulnerabilities across code, dependencies, images, and infrastructure.
• Automate security baseline enforcement and evidence collection.
• Collaborate with development teams to embed secure coding practices and threat modeling.
• Support incident response and post-incident reviews for security events.
• Continuously improve security tooling coverage and reduce false positives.
• Participate in on-call rotation for production support.

Skills

Security engineering

Threat modeling

On-call experience

Collaboration with teams

Education

Bachelor's degree in Computer Science, Engineering, or related field

Tools

Jenkins

GitLab CI

GitHub Actions

SonarQube

Snyk

Trivy

OWASP ZAP

Docker

Kubernetes

Terraform

Vault

Python

Bash

Job description

SmartConsulting.net is seeking a DevSecOps Engineer to embed security into the software delivery lifecycle for a gaming platform. You will integrate automated security controls into CI/CD pipelines, define security-as-code, and Harden containers and orchestration with Docker and Kubernetes.

You will manage secrets, monitor vulnerabilities, and collaborate with development teams to drive secure coding practices, incident response, and continuous security improvements.