DevSecOps Manager

Socium - Teams Done Differently; Pasay; On-site; PHP 1,200,000 - 2,400,000; Full time

Job summary

Socium - Teams Done Differently is seeking an experienced DevSecOps engineer to automate security across CI/CD pipelines and secure cloud-native environments. You will implement IAM RBAC, Zero Trust, and compliance automation while integrating SAST/DAST/SCA tools.

Responsibilities include IaC security with Terraform and CloudFormation, securing Kubernetes, and strengthening secure SDLC practices across platform teams.

Qualifications

• Experience in DevSecOps within platform engineering.
• Hands-on Terraform and IaC pipelines security.
• Design secure internal developer platforms (IDPs) or PaaS environments.
• Experience with CSPM tools such as Prisma Cloud or Dome9.
• Security automation in CI/CD and governance tooling.

Responsibilities

• Automate security controls within CI/CD pipelines.
• Secure cloud environments and container platforms.
• Integrate security testing tools (SAST, DAST, SCA).
• Implement IaC security using Terraform and CloudFormation.
• Enforce IAM best practices, RBAC, and federated identity.
• Apply security frameworks and compliance automation.
• Perform threat modeling and risk assessments.
• Secure DevOps toolchains and repositories.
• Implement Zero Trust principles and governance controls.
• Maintain audit trails and governance compliance.
• Familiarity with Kubernetes security (RBAC, network policies, secrets).
• Experience with compliance-as-code tools (Chef InSpec, OpenSCAP).

Skills

DevSecOps

CI/CD security

Cloud security

Kubernetes security

IaC security

Threat modeling

Vulnerability management

Governance and compliance

Tools

Terraform

CloudFormation

Snyk

SonarQube

Checkmarx

Fortify

Jenkins

GitLab

CircleCI

GitHub Actions

Job description

• Automate security controls within CI/CD pipelines (Jenkins, GitLab, CircleCI, GitHub Actions
• Secure cloud environments (AWS, Azure, GCP) and container platforms (Docker, Kubernetes)
• Integrate security testing tools (SAST, DAST, SCA) such as Snyk, SonarQube, Checkmarx, or Fortify
• Implement Infrastructure as Code (IaC) security using Terraform and CloudFormation
• Enforce IAM best practices, RBAC, and federated identity (SAML, OAuth, Cognito)
• Apply security frameworks (ISO 27001, NIST, CIS) and compliance automation
• Perform threat modeling, risk assessments, and vulnerability management
• Secure DevOps toolchains, artifact repositories (JFrog, Nexus), and source control system
• Implement Zero Trust principles and cloud-native security controls
• Maintain audit trails, enforce policies (OPA, AWS Config), and ensure governance compliance
• Strong expertise in DevSecOps practices and secure SDLC
• Deep knowledge of cloud and container security
• Hands-on experience with IaC security and automation
• Familiarity with Kubernetes security (RBAC, network policies, secrets management)
• Proficiency in security tools and automation frameworks
• Experience with compliance-as-code tools (Chef InSpec, OpenSCAP)

Preferred Experience

• Proven experience in DevSecOps within platform engineering environments, building secure and scalable developer platforms
• Hands-on expertise with Terraform, including securing Terraform modules, state management, and IaC pipelines
• Experience designing and securing internal developer platforms (IDPs) or platform-as-a-service (PaaS) environments
• Strong background in automating security controls at scale across cloud-native architectures
• Experience with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud or Dome9
• Exposure to enterprise-grade security architecture and governance frameworks