Secure DevSecOps Engineer: CI/CD Security & Automation

Maya; Metro Manila; On-site; PHP 900,000 - 1,300,000; Full time

Job summary

Maya in Metro Manila is seeking a DevSecOps Specialist to embed security across the software lifecycle, focusing on automating and scaling security in CI/CD pipelines without slowing development.

You will work with product, tech and operations, drive secure coding practices, conduct threat modeling for features and APIs, and support the Office of the CISO in security initiatives.

Qualifications

• 3–5 years in AppSec, DevSecOps, or related SDLC security engineering roles.
• Experience integrating CI/CD with SAST, SCA, and DAST tools.
• Automation scripting using Python or JavaScript.

Responsibilities

• Own the integration and continuous improvement of AppSec tools (SAST, SCA, DAST) in CI/CD workflows.
• Lead security reviews for high-impact features and services.
• Design and maintain security-as-code pipelines and controls at the application layer.
• Conduct threat modeling for product features, APIs and services.
• Drive adoption of secure coding practices and provide security guidance to engineers during design and implementation.
• Automate detection and remediation of application-level vulnerabilities.
• Support the Office of the CISO in executing security strategies and initiatives.

Skills

CI/CD automation

SAST SCA DAST tools

Python

JavaScript

OWASP Top 10

Tools

SAST

SCA

DAST

Job description

Our goal is for everyone to make bolder choices with their finances.

To get there, we're creating an all-in-one ecosystem of financial services for today's generation of goal-getters. That feat takes extraordinary people-those with the guts to challenge the way things are and transform them into something better.

To be part of Team Maya is to be Bolder for Better.

Description:

Overview:

The DevSecOps Specialist plays a key role in embedding security across the software development lifecycle. With a deep understanding of application security and secure development practices, this role focuses on automating and scaling security across CI/CD pipelines, helping engineering teams build secure software without sacrificing speed.

Working closely with product, tech and operations teams, the DevSecOps Specialist simplifies security adoption. Automating compliance, reducing risks and making security a seamless part of the DevOps process. The goal is to protect applications while keeping development fast and efficient.

What you will do:

• Own the integration and continuous improvement of AppSec tools (SAST, SCA, DAST) in CI/CD workflows.
• Lead security reviews for high-impact features and services.
• Design and maintain security-as-code pipelines and controls at the application layer.
• Conduct deep-dive threat modeling for product features, APIs and services.
• Drive adoption of secure coding practices and provide security guidance to engineers during design and implementation.
• Automate detection and remediation of application-level vulnerabilities.
• Support the Office of the CISO in executing security strategies and initiatives.

What we are looking for:

• 3–5 years in AppSec, DevSecOps, or related SDLC security engineering roles.
• Strong experience with CI/CD integration for SAST, SCA, and DAST tools.
• Familiarity in Python, JavaScript or similar for automation of security checks.
• Knowledge of modern web app and API security risks (e.g. OWASP Top 10).

About Us

Maya is the all-in-one money platform that is bringing Filipinos bolderways to master their money.It is powered by a unique integrated financial services ecosystem that addresses the ever-evolving needs of today’s generation of moneymakers through cutting edge technology.

Welead millions of Filipinos — consumers, businesses,communities, and government agencies alike — into a version ofthe current digital economy that’s more inclusive, transparent,and empowering than ever.

We arepowered by the country's only end-to-end digital payments company Maya Philippines, Inc. and Maya Bank, Inc. for digital banking services.

Maya Bank, Inc. and Maya Philippines, Inc. are regulated by the Bangko Sentral ng Pilipinas. https://www.bsp.gov.ph/