DevSecOps Specialist

Maya; Metro Manila; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Maya in Metro Manila is seeking a DevSecOps Specialist to embed security across the software lifecycle, focusing on automating and scaling security in CI/CD pipelines without slowing development.

You will work with product, tech and operations, drive secure coding practices, conduct threat modeling for features and APIs, and support the Office of the CISO in security initiatives.

Qualifications

• 3–5 years in AppSec, DevSecOps, or related SDLC security engineering roles.
• Experience integrating CI/CD with SAST, SCA, and DAST tools.
• Automation scripting using Python or JavaScript.

Responsibilities

• Own the integration and continuous improvement of AppSec tools (SAST, SCA, DAST) in CI/CD workflows.
• Lead security reviews for high-impact features and services.
• Design and maintain security-as-code pipelines and controls at the application layer.
• Conduct threat modeling for product features, APIs and services.
• Drive adoption of secure coding practices and provide security guidance to engineers during design and implementation.
• Automate detection and remediation of application-level vulnerabilities.
• Support the Office of the CISO in executing security strategies and initiatives.

Skills

CI/CD automation

SAST SCA DAST tools

Python

JavaScript

OWASP Top 10

Tools

SAST

SCA

DAST

Job description

Overview

The DevSecOps Specialist plays a key role in embedding security across the software development lifecycle. With a deep understanding of application security and secure development practices, this role focuses on automating and scaling security across CI/CD pipelines, helping engineering teams build secure software without sacrificing speed.

Working closely with product, tech and operations teams, the DevSecOps Specialist simplifies security adoption. Automating compliance, reducing risks and making security a seamless part of the DevOps process. The goal is to protect applications while keeping development fast and efficient.

Responsibilities

• Own the integration and continuous improvement of AppSec tools (SAST, SCA, DAST) in CI/CD workflows.
• Lead security reviews for high-impact features and services.
• Design and maintain security-as-code pipelines and controls at the application layer.
• Conduct deep-dive threat modeling for product features, APIs and services.
• Drive adoption of secure coding practices and provide security guidance to engineers during design and implementation.
• Automate detection and remediation of application-level vulnerabilities.
• Support the Office of the CISO in executing security strategies and initiatives.

Qualifications

• 3–5 years in AppSec, DevSecOps, or related SDLC security engineering roles.
• Strong experience with CI/CD integration for SAST, SCA, and DAST tools.
• Familiarity in Python, JavaScript or similar for automation of security checks.
• Knowledge of modern web app and API security risks (e.g., OWASP Top 10).