DevSecOps Engineer | Hybrid | Morning Shift
Cloudstaff Philippines Inc.
Don’t send a generic resume — generate a resume and cover letter tailored to this exact role.
Benefits offered by this job
Job summary
Cloudstaff Philippines Inc. is seeking a DevSecOps Engineer to lead cloud security and platform engineering for our AWS environment. The role emphasizes hardening security, IaC with Terraform, and supporting secure delivery of in-house applications.
You will define secure SDLC practices, stand up GitHub Enterprise with CI/CD pipelines, and collaborate across teams to ensure robust security posture in a hybrid work setup.
Qualifications
- Demonstrated experience engineering and hardening production AWS environments.
- Hands-on IaC with Terraform and patching with AWS Systems Manager.
- Knowledge of AWS security services: Security Hub, GuardDuty, CloudTrail, Identity Center, Secrets Manager.
- Experience building CI/CD pipelines with SAST/DAST/SCA and secrets detection.
- Understanding of secure SDLC, GitHub source control, and engineering docs in English.
Responsibilities
- Harden AWS platform and CIS Benchmark alignment; manage IAM keys and security groups.
- Migrate IAM keys to Secrets Manager; enable SSO through AWS Identity Center to Entra ID.
- Enable GuardDuty, CloudTrail data events; forward to SIEM for detection.
- Define secure SDLC practices and CI/CD tooling with SAST/DAST/SCA.
- Maintain IaC with Terraform and manage workload patching via AWS Systems Manager.
- Support disaster recovery with immutability backups and proper IaC.
Skills
Education
Tools
Job description
Looking for a role that fosters collaboration, creativity and career growth in a vibrant office environment? We got you covered! Join our team at Cloudstaff, the #1 workplace everywhere! Think you qualify for the role?
Role: DevSecOps Engineer
Work Arrangement: Hybrid
Location: Philippines - Makati/Ortigas/Pampanga (Angeles)
Schedule: Morning Shift
The DevSecOps Engineer runs the day-to-day security and platform engineering for the Nexgen Amazon Web Services (AWS) environment and the DevOps capability. The role hardens the cloud security posture, patches and configures workloads, maintains Infrastructure as Code (IaC), and supports the secure delivery of the in-house applications.
Harden the AWS platform against AWS Security Hub findings and the Centre for Internet Security (CIS) Benchmark, tightening security groups and rotating Identity and Access Management (IAM) keys.
Remediate AWS root account custody, move IAM keys into AWS Secrets Manager, and enable single sign-on through AWS Identity Center to the new Entra ID tenant.
Enable Amazon GuardDuty malware protection and AWS CloudTrail data events, forwarding events to the Security Information and Event Management (SIEM) platform for detection.
Define secure Software Development Lifecycle (SDLC) practices and coding standards for the in-house applications SOHO, Digital and Active Billing.
Stand up GitHub Enterprise with mandatory peer review and a Continuous Integration and Continuous Delivery (CI/CD) pipeline running Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA) and secrets detection.
Maintain Infrastructure as Code (IaC) with Terraform and manage workload patching and configuration through AWS Systems Manager, supporting deployments and the release cadence.
Support cloud security posture and vulnerability remediation alongside the Security Operations Engineer, using AWS Config and Microsoft Defender for Cloud.
Deploy and validate immutable backups of AWS workloads and workload configuration as IaC using AWS Backup, supporting disaster recovery.
Provide cloud detection support to the SOC Analyst by tuning and validating AWS log sources feeding the SIEM.
AWS platform, including AWS Config, AWS Security Hub, Amazon GuardDuty, AWS CloudTrail, AWS Identity Center, AWS Secrets Manager and AWS Backup.
AWS Systems Manager for workload patching and configuration management, with Terraform for Infrastructure as Code (IaC).
GitHub Enterprise, GitHub Actions, and GitHub Advanced Security for source control, peer review and the Continuous Integration and Continuous Delivery (CI/CD) pipeline.
In-house applications SOHO, Digital and Active Billing hosted on AWS, transitioning out from Infotrust, protected by Microsoft Defender for Cloud.
Demonstrated experience engineering and hardening production AWS environments against recognised security benchmarks.
Hands-on experience with Infrastructure as Code (IaC) using Terraform and with AWS Systems Manager for patching and configuration.
Working knowledge of AWS security services, including Security Hub, GuardDuty, CloudTrail, Identity Center and Secrets Manager.
Experience building and securing Continuous Integration and Continuous Delivery (CI/CD) pipelines with SAST, DAST, SCA and secrets detection.
Practical understanding of secure Software Development Lifecycle (SDLC) practices, source control with GitHub, and clear written English for engineering documentation.
An AWS certification such as AWS Certified Security Specialty, and experience integrating AWS logsources into a Security Information and Event Management (SIEM) platform such as Rapid7 or Microsoft Sentinel.
Experience with immutable backup and disaster recovery for cloud workloads using AWS Backup and Microsoft Defender for Cloud.
A relevant tertiary qualification in software engineering, cloud computing, cyber security or a related field, or equivalent experience.
Comprehensive health and life insurance on your 16th day of employment, covering 1 free dependent on the 16th day of employment
Up to 24 leave credits per year
Flexible leave credits which may be used for vacation, emergency and sick leaves
Endless opportunities for career advancement
Exclusive ATM inside the office for employee's convenience
Annual Performance Review with Salary Increase
We set you up for success with a company-provided PC/Laptop and fiber internet connection
Look forward to weekly office perks for work from office staff - Free Coffee, Meals and Beer Fridays!
Top notch workplace with first class VIP lounge and game rooms
Child friendly spaces to cater to the needs of employees with children, enhancing work-life balance
Participate and join our CS Social Clubs and Special Interest Groups to connect with colleagues
Mental Wellness Employee Assistance program through Lifeworks
In-house psychiatrist available to support employees' well-being
Become part of the Employee Share Units program
-
Cloudstaff Dream Points - To be used for bidding useful items like appliances, kitchenettes etc.
Cloudstaff : Build Your Career, AnywhereEstablished in 2005, Cloudstaff is a leading outsourcing company that empowers businesses to thrive through smarter talent solutions. We're passionate about creating a work environment that fosters your professional growth and overall well-being.
Why Cloudstaff is the #1 Workplace?- Award-winning Culture: We're committed to building the #1 Workplace Everywhere, with a proven track record of staff engagement initiatives and industry recognition
- Invest in You: We support your development through comprehensive training programs, mentoring and opportunities for career advancement
- Thrive as an Individual: We offer a strong work-life balance with flexible schedules, meaningful perks and a collaborative team environment.
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
