DevSecOps Engineer - Secure AWS Cloud & CI/CD

Cloudstaff Philippines Inc.; Philippines; On-site; PHP 1,000,000 - 2,000,000; Full time

Benefits offered by this job

Comprehensive health and life保险 on 16+

Leave credits and flexible time off

Company-provided PC and fiber internet

Job summary

Cloudstaff Philippines Inc. is seeking a DevSecOps Engineer to run the day-to-day security and platform engineering for the Nexgen AWS environment and DevOps capability.

You will harden the cloud security posture, patch workloads, manage IaC with Terraform, and enable CI/CD pipelines with SAST/DAST/SCA while integrating AWS security services such as Security Hub, GuardDuty, CloudTrail and Secrets Manager. Experience with GitHub Enterprise, GitHub Actions, and SIEM integrations (Rapid7 or

Qualifications

• Demonstrated experience engineering and hardening production AWS environments against recognised security benchmarks.
• Hands-on experience with Infrastructure as Code (IaC) using Terraform and with AWS Systems Manager for patching and configuration.
• Working knowledge of AWS security services, including Security Hub, GuardDuty, CloudTrail, Identity Center and Secrets Manager.
• Experience building and securing CI/CD pipelines with SAST, DAST, SCA and secrets detection.
• Practical understanding of secure SDLC practices, GitHub, and clear written English for engineering documentation.

Responsibilities

• Harden the AWS platform against security findings and CIS Benchmarks, tighten security groups, rotate IAM keys.
• Remediate AWS root account custody, move IAM keys to Secrets Manager, enable SSO through AWS Identity Center to Entra ID tenant.
• Enable GuardDuty malware protection and CloudTrail data events, forward to SIEM for detection.
• Define secure SDLC practices and coding standards for in-house apps (SOHO, Digital, Active Billing).
• Stand up GitHub Enterprise with mandatory peer review and CI/CD with SAST/DAST/CSA and secrets detection.
• Maintain IaC with Terraform and manage workload patching and configuration via AWS Systems Manager.

Skills

AWS security

Terraform

GitHub Enterprise

CI/CD

SAST/DAST/SCA

Security Hub

GuardDuty

CloudTrail

Secrets Manager

SIEM

Tools

Terraform

AWS Systems Manager

GitHub Actions

GitHub Advanced Security

Microsoft Defender for Cloud

AWS Backup

AWS Config

SIEM platforms (Rapid7/Microsoft Sentinel)

Job description

Cloudstaff Philippines Inc. is seeking a DevSecOps Engineer to run the day-to-day security and platform engineering for the Nexgen AWS environment and DevOps capability.

You will harden the cloud security posture, patch workloads, manage IaC with Terraform, and enable CI/CD pipelines with SAST/DAST/SCA while integrating AWS security services such as Security Hub, GuardDuty, CloudTrail and Secrets Manager. Experience with GitHub Enterprise, GitHub Actions, and SIEM integrations (Rapid7 or