DevSecOps Manager

Socium - Teams Done Differently; Pasay; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

Socium - Teams Done Differently is seeking an experienced DevSecOps Manager to integrate security across cloud, infrastructure, and software delivery environments. You will embed security throughout the development lifecycle, automate controls in CI/CD, secure cloud platforms (AWS, Azure, GCP), and enforce IAMRBAC and Zero Trust across Kubernetes.

The role requires hands-on work with IaC security (Terraform, CloudFormation), SAST/DAST/SCA tools, and governance- and compliance-driven practices.

Qualifications

• Bachelor's Degree in IT/CS/Engineering/Cybersecurity or related field.
• 5+ years of hands-on Terraform experience.
• At least 1 year of DevSecOps experience.
• Experience with CI/CD security, cloud platforms, and Kubernetes/container environments.

Responsibilities

• Automate security controls within CI/CD pipelines (Jenkins, GitLab, CircleCI, GitHub Actions).
• Secure cloud environments (AWS, Azure, GCP) and container platforms including Docker and Kubernetes.
• Integrate security testing tools (SAST, DAST, SCA) such as Snyk, SonarQube, Checkmarx, Fortify.
• Implement IaC security using Terraform and CloudFormation.
• Enforce IAM best practices, RBAC, and federated identity technologies (SAML, OAuth, Cognito).
• Apply security frameworks (ISO 27001, NIST, CIS) and support compliance automation.
• Conduct threat modeling, risk assessments, and vulnerability management.
• Secure DevOps toolchains, source control systems, and artifact repositories (JFrog, Nexus).
• Implement Zero Trust and cloud-native security controls.
• Maintain audit trails and governance with OPA and AWS Config.
• Strong DevSecOps and Secure SDLC expertise.
• Deep knowledge of cloud and container security.
• Hands-on IaC security and automation experience.
• Kubernetes security knowledge (RBAC, network policies, secrets).
• Proficiency in security tools and automation frameworks.
• Experience with compliance-as-code tools such as Chef InSpec and OpenSCAP.

Skills

CI/CD security

Cloud security

Security testing tools

IaC security

Terraform

Kubernetes security

RBAC/IAM

Zero Trust

Threat modeling

Security automation

Education

Bachelor's degree in IT/CS/Engineering/Cybersecurity or related field

Tools

Terraform

CloudFormation

Jenkins

GitHub Actions

Snyk

SonarQube

Checkmarx

Fortify

JFrog

Nexus

AWS

Azure

GCP

OpenSCAP

Chef InSpec

OPA

AWS Config

CircleCI

Kubernetes

Job description

A leading Philippine conglomerate with a diversified portfolio spanning retail, banking, property, and other major industries. The organization focuses on sustainable growth, operational excellence, innovation, and building technology platforms that support large-scale enterprise operations.

About the Role

We are looking for an experienced DevSecOps Manager to drive security integration across cloud, infrastructure, and software delivery environments. The role will focus on embedding security throughout the development lifecycle, strengthening cloud-native platforms, and automating security controls across CI/CD and Infrastructure as Code (IaC) environments.

Key Responsibilities

• Automate security controls within CI/CD pipelines using Jenkins, GitLab, CircleCI, GitHub Actions, or similar technologies.
• Secure cloud environments (AWS, Azure, GCP) and container platforms including Docker and Kubernetes.
• Integrate security testing tools (SAST, DAST, SCA) such as Snyk, SonarQube, Checkmarx, and Fortify.
• Implement Infrastructure as Code (IaC) security using Terraform and CloudFormation.
• Enforce IAM best practices, RBAC, and federated identity technologies such as SAML, OAuth, and Cognito.
• Apply security frameworks including ISO 27001, NIST, and CIS, and support compliance automation.
• Conduct threat modeling, risk assessments, and vulnerability management.
• Secure DevOps toolchains, source control systems, and artifact repositories such as JFrog and Nexus.
• Implement Zero Trust principles and cloud-native security controls.
• Maintain audit trails, enforce security policies using tools such as OPA and AWS Config, and ensure governance compliance.
• Strong expertise in DevSecOps practices and Secure SDLC.
• Deep knowledge of cloud and container security.
• Hands-on experience with Infrastructure as Code security and automation.
• Strong understanding of Kubernetes security, including RBAC, network policies, and secrets management.
• Proficiency in security tools and automation frameworks.
• Experience with compliance-as-code tools such as Chef InSpec and OpenSCAP.

Preferred Experience

• Proven DevSecOps experience within platform engineering environments, building secure and scalable developer platforms.
• Strong hands-on expertise with Terraform, including securing Terraform modules, state management, and IaC pipelines.
• Experience designing and securing Internal Developer Platforms (IDPs) or Platform-as-a-Service (PaaS) environments.
• Strong background in automating security controls at scale across cloud-native architectures.
• Experience with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud or Dome9.
• Exposure to enterprise-grade security architecture and governance frameworks.

Requirements

• Bachelor's Degree in Information Technology, Computer Science, Engineering, Cybersecurity, or a related field.
• 5+ years of hands-on experience with Terraform.
• At least 1 year of DevSecOps experience.
• Experience working with CI/CD security, cloud platforms, and Kubernetes/container environments.