Senior DevSecOps Engineer: Cloud Security & CI/CD Leader

SM Investments Corporation; Pasay; On-site; PHP 1,200,000 - 2,000,000; Full time

Job summary

SM Investments Corporation in the Philippines seeks a seasoned DevSecOps security professional to automate controls across CI/CD pipelines, secure multi-cloud environments, and harden container platforms. You will implement IaC security, enforce IAM best practices, apply security frameworks, and drive threat modeling, vulnerability management, and compliance automation.

The role requires hands-on expertise with Terraform, Kubernetes, Snyk, SonarQube, and Fortify, plus experience with JFrog/Nexus

Qualifications

• Strong expertise in DevSecOps and secure SDLC practices.
• Experience implementing security controls in CI/CD pipelines.
• Familiarity with cloud security in multi-cloud environments.
• Proficient in IaC security using Terraform or CloudFormation.
• Knowledge of IAM, RBAC, and federated identity standards.
• Experience with security testing tools (SAST/DAST/SCA).

Responsibilities

• Automate security controls within CI/CD pipelines.
• Secure cloud environments and container platforms.
• Integrate security testing tools (SAST/DAST/SCA).
• Implement IaC security.
• Enforce IAM best practices and federated identities.
• Apply security frameworks and compliance automation.
• Perform threat modeling, risk assessments, and vulnerability management.
• Secure DevOps toolchains and repos (JFrog/Nexus, source control).
• Implement Zero Trust principles and cloud-native controls.
• Maintain audit trails, enforce policies (OPA, AWS Config).
• Deep knowledge of cloud and container security.
• Hands-on with IaC security and automation.
• Familiarity with Kubernetes security (RBAC, network policies).
• Proficiency in security tools and automation frameworks.
• Experience with compliance-as-code tools (Chef InSpec, OpenSCAP)

Skills

CI/CD security

Cloud security

IaC security

Zero Trust

DevSecOps

Container security

Threat modeling

Security automation

SAST/DAST/SCA

RBAC

Tools

Jenkins

GitLab

CircleCI

GitHub Actions

AWS

Azure

GCP

Docker

Kubernetes

Terraform

CloudFormation

Snyk

SonarQube

Checkmarx

Fortify

OPA

OpenSCAP

JFrog/Nexus

Job description

SM Investments Corporation in the Philippines seeks a seasoned DevSecOps security professional to automate controls across CI/CD pipelines, secure multi-cloud environments, and harden container platforms. You will implement IaC security, enforce IAM best practices, apply security frameworks, and drive threat modeling, vulnerability management, and compliance automation.

The role requires hands-on expertise with Terraform, Kubernetes, Snyk, SonarQube, and Fortify, plus experience with JFrog/Nexus