DevSecOps Engineer: Secure CI/CD & Cloud

solaireresort; Parañaque; On-site; PHP 600,000 - 900,000; Full time

Job summary

solaireresort seeks an experienced DevSecOps/security engineer to integrate automated security testing into CI/CD pipelines and define security-as-code controls. You will harden container platforms like Docker and Kubernetes, manage secrets centrally, and drive remediation with development teams to meet SLAs.

The role covers cloud and on-premises environments, with on-call support for production systems. You will collaborate across teams to embed secure coding practices and threat modeling early

Qualifications

• Bachelor's degree in computer science, engineering, or a related field or equivalent practical experience.
• 3+ years in a DevSecOps/DevOps or security engineering role with high-availability platforms.
• Proficiency with CI/CD tools and multiple security scanners.
• Experience with IaC, cloud platforms, and secrets management.

Responsibilities

• Integrate SAST/DAST/SCA and container security into CI/CD pipelines.
• Maintain security-as-code and policy-as-code controls including IaC scanning.
• Harden Docker and Kubernetes with least-privilege, image signing, and runtime controls.
• Manage secrets across pipelines using centralized secrets management.
• Monitor, triage, and remediate vulnerabilities across code, images, and infra.
• Collaborate with dev teams to embed secure coding practices and threat modeling.
• Support incident response and post-incident reviews affecting pipelines and workloads.
• Contribute to continuous improvement of security tooling and reduce false positives.

Skills

CI/CD tooling

Security testing

Threat modeling

SAST/DAST/SCA

Kubernetes

Education

Bachelor's degree

Tools

Jenkins

GitLab CI

GitHub Actions

SonarQube

Snyk

Trivy

OWASP ZAP

Terraform

Docker

Kubernetes

HashiCorp Vault

Job description

solaireresort seeks an experienced DevSecOps/security engineer to integrate automated security testing into CI/CD pipelines and define security-as-code controls. You will harden container platforms like Docker and Kubernetes, manage secrets centrally, and drive remediation with development teams to meet SLAs.

The role covers cloud and on-premises environments, with on-call support for production systems. You will collaborate across teams to embed secure coding practices and threat modeling early