Security-Driven DevSecOps Engineer

Zohorecruit; Parañaque; On-site; PHP 1,339,000 - 2,009,000; Full time

Job summary

Zohorecruit in Metro Manila is seeking a DevSecOps Engineer to integrate automated security testing (SAST, DAST, SCA) into CI/CD pipelines, enforcing gates before deployment.

You will define security-as-code, harden Docker and Kubernetes clusters, manage secrets, and drive remediation with development teams. On-call rotations and continuous improvement are part of the role.

Experience with IaC (Terraform), cloud platforms, and scripting (Python, Bash) is essential to succeed.

Qualifications

• Bachelor’s degree in computer science, engineering, or related field.
• 3+ years in a DevSecOps, DevOps, or security engineering role.
• Proficiency with CI/CD tools (Jenkins, GitLab CI, GitHub Actions), security scanning tools (SonarQube, Snyk, Trivy, OWASP ZAP), containerization/orchestration (Docker, Kubernetes), Terraform, cloud platforms (AWS/Azure/GCP), HashiCorp Vault, Python/Bash scripting.

Responsibilities

• Integrate automated security testing (SAST, DAST, SCA, container and image scanning) into CI/CD pipelines, enforcing security gates before deployment.
• Define and maintain security-as-code and policy-as-code controls, including infrastructure as code (IaC) scanning for cloud and on-premises environments.
• Harden container and orchestration platforms such as Docker and Kubernetes, enforcing least-privilege access, image signing, and runtime security controls.
• Manage secrets, credentials, and certificates through centralized secrets management, eliminating hard-coded credentials across pipelines and services.
• Monitor, triage, and prioritize vulnerabilities across code, dependencies, images, and infrastructure, driving remediation with development teams against defined SLAs.
• Automate security baseline enforcement and compliance evidence collection across cloud and on-premises environments.
• Collaborate with development teams to embed secure coding practices, threat modeling, and security requirements early in the development cycle.
• Support incident response and post-incident reviews for security events affecting pipelines, infrastructure, and workloads, driving root-cause remediation.
• Continuously improve security tooling coverage and accuracy, reducing false positives and mean time to remedite.
• Participate in the on-call rotation to support production systems.

Skills

CI/CD tools

Security scanning

Containerization

Infrastructure as Code

Cloud platforms

Secrets management

Scripting

Education

Bachelor's degree in computer science, engineering, or related field

Job description

Zohorecruit in Metro Manila is seeking a DevSecOps Engineer to integrate automated security testing (SAST, DAST, SCA) into CI/CD pipelines, enforcing gates before deployment.

You will define security-as-code, harden Docker and Kubernetes clusters, manage secrets, and drive remediation with development teams. On-call rotations and continuous improvement are part of the role.

Experience with IaC (Terraform), cloud platforms, and scripting (Python, Bash) is essential to succeed.