Senior DevSecOps Engineer

SM Investments; Pasay; On-site; PHP 1,200,000 - 2,100,000; Full time

Benefits offered by this job

DevSecOps focus

Job summary

SM Investments Corporation is seeking a seasoned DevSecOps security expert to strengthen our platform engineering and secure cloud-native environments across AWS, Azure, and GCP.

You will lead implementation of automated security controls in CI/CD, secure IaC pipelines, and enforce IAM, Zero Trust, and compliance frameworks. The role requires deep knowledge of container security, security testing tooling, and governance practices to protect our retail, banking, and property operations.

Qualifications

• Experience in DevSecOps within platform engineering, building secure developer platforms.
• Hands-on Terraform, Terraform module security, and IaC pipelines.
• Experience designing internal developer platforms (IDPs) or PaaS environments.
• Automating security controls at scale across cloud-native architectures.
• Familiarity with Cloud Security Posture Management tools such as Prisma Cloud or Dome9.

Responsibilities

• Automate security controls within CI/CD pipelines (Jenkins, GitLab, CircleCI, GitHub Actions).
• Secure cloud environments (AWS, Azure, GCP) and container platforms (Docker, Kubernetes).
• Integrate security testing tools (SAST, DAST, SCA) such as Snyk, SonarQube, Checkmarx, Fortify.
• Implement Infrastructure as Code (IaC) security using Terraform and CloudFormation.
• Enforce IAM best practices, RBAC, and federated identity (SAML, OAuth, Cognito).
• Apply security frameworks (ISO 27001, NIST, CIS) and compliance automation.
• Perform threat modeling, risk assessments, and vulnerability management.
• Secure DevOps toolchains, artifact repositories (JFrog, Nexus), and source control systems.
• Implement Zero Trust principles and cloud-native security controls.
• Maintain audit trails, enforce policies (OPA, AWS Config), and ensure governance compliance.
• Strong expertise in DevSecOps practices and secure SDLC.
• Deep knowledge of cloud and container security.
• Hands-on experience with IaC security and automation.
• Familiarity with Kubernetes security (RBAC, network policies, secrets management).
• Proficiency in security tools and automation frameworks.
• Experience with compliance-as-code tools (Chef InSpec, OpenSCAP).

Skills

CI/CD security

Cloud security

Container security

Security testing (SAST/DAST/SCA)

IaC security (Terraform, CloudFormac</

IAM security & RBAC

Security frameworks & compliance (ISO

Threat modeling

Vulnerability management

DevSecOps & secure SDLC

Kubernetes security

Automation frameworks & security tools

Compliance-as-code (Chef InSpec, OpenS

Zero Trust

Audit & governance (OPA, AWS Config)

Secure DevOps tooling (JFrog, Nexus)

Tools

Jenkins

GitLab

CircleCI

GitHub Actions

AWS

Azure

GCP

Docker

Kubernetes

Snyk

SonarQube

Checkmarx

Fortify

Terraform

CloudFormation

OPA

AWS Config

Job description

At SM Investments, we shape sustainable growth stories that move industries and uplift communities. As one of the Philippines’ leading conglomerates, we build opportunities across retail, banking, and property guided by excellence, integrity, and innovation.

Key Responsibilitie

• Automate security controls within CI/CD pipelines (Jenkins, GitLab, CircleCI, GitHub Actions
• Secure cloud environments (AWS, Azure, GCP) and container platforms (Docker, Kubernetes)
• Integrate security testing tools (SAST, DAST, SCA) such as Snyk, SonarQube, Checkmarx, or Fortify
• Implement Infrastructure as Code (IaC) security using Terraform and CloudFormation
• Enforce IAM best practices, RBAC, and federated identity (SAML, OAuth, Cognito)
• Apply security frameworks (ISO 27001, NIST, CIS) and compliance automation
• Perform threat modeling, risk assessments, and vulnerability management
• Secure DevOps toolchains, artifact repositories (JFrog, Nexus), and source control system
• Implement Zero Trust principles and cloud-native security controls
• Maintain audit trails, enforce policies (OPA, AWS Config), and ensure governance compliance
• Strong expertise in DevSecOps practices and secure SDLC
• Deep knowledge of cloud and container security
• Hands-on experience with IaC security and automation
• Familiarity with Kubernetes security (RBAC, network policies, secrets management)
• Proficiency in security tools and automation frameworks
• Experience with compliance-as-code tools (Chef InSpec, OpenSCAP)

Preferred Experience

• Proven experience in DevSecOps within platform engineering environments, building secure and scalable developer platforms
• Hands-on expertise with Terraform, including securing Terraform modules, state management, and IaC pipelines
• Experience designing and securing internal developer platforms (IDPs) or platform-as-a-service (PaaS) environments
• Strong background in automating security controls at scale across cloud-native architectures
• Experience with Cloud Security Posture Management (CSPM) tools such as Prisma Cloud or Dome9
• Exposure to enterprise-grade security architecture and governance frameworks