Senior DevSecOps Engineer (Hybrid)

blaseek; Manila; On-site; PHP 1,800,000 - 2,400,000; Full time

Job summary

blaseek is seeking a Senior/Lead DevSecOps Engineer to serve as a hands-on technical leader embedding a security-first mindset across the software development lifecycle. The role blends security, development, and operations to drive DevSecOps adoption and implement automated controls in regulated environments.

The successful candidate will design, implement, and automate security controls protecting critical apps and infrastructure while preserving development agility.

Qualifications

• Experience leading DevSecOps initiatives across engineering teams.
• Proficient in securing CI/CD pipelines and IaC security.
• Familiar with secrets management and automated security tooling.

Responsibilities

• Define and implement DevSecOps strategy across engineering groups.
• Design secure CI/CD pipelines with integrated testing tools.
• Enforce security standards in IaC with Terraform/CloudFormation.
• Manage secrets infrastructure and automated remediation workflows.
• Automate vulnerability scanning, patching, and compliance checks.
• Lead regulatory alignment and risk assessment activities.
• Mentor engineers on secure coding and tooling.
• Provide incident response support and SOC collaboration.

Skills

DevSecOps leadership

Secure CI/CD

Threat modeling

Collaboration

Mentorship

Incident response

Security governance

Tools

Terraform

CloudFormation

HashiCorp Vault

AWS Secrets Manager

Azure Secrets Manager

SIEM

Job description

Role Overview

The Senior / Lead DevSecOps Engineer is a hands-on technical leader responsible for embedding a security-first mindset throughout the software development lifecycle. This role blends deep expertise in security, development, and operations to drive adoption of DevSecOps practices across engineering teams.

The successful candidate will design, implement, and automate security controls that protect critical applications and infrastructure while ensuring development agility. Experience working in regulated industries, particularly banking or financial services, is a strong advantage.

Key Responsibilities

• DevSecOps Strategy and Implementation
• Secure CI/CD Pipelines: Design, build, and maintain automated, secure CI/CD pipelines with integrated security testing and validation tools.
• Infrastructure as Code (IaC) Security: Define and enforce security standards in IaC using tools like Terraform or CloudFormation. Implement automated scanning and compliance validation.
• Secrets Management: Deploy and manage secure systems for secrets, keys, and credentials (e.g., HashiCorp Vault, AWS/Azure Secrets Manager).
• Security Automation: Automate security-related processes such as configuration management, vulnerability scanning, patching, and compliance verification.
• Security Governance and Compliance
• Regulatory Alignment: Ensure all practices and systems comply with relevant standards such as PCI DSS, SOC 2, NIST, GDPR, and internal audit or risk frameworks.
• Threat Modeling and Risk Assessment: Lead proactive threat modeling early in the SDLC to identify and mitigate potential vulnerabilities.
• Continuous Monitoring: Implement and maintain continuous monitoring, logging, and alerting using SIEM and related tools to detect and respond to threats in real time.
• Collaboration, Mentorship, and Incident Support
• Cross-Functional Collaboration: Work closely with Development, Operations, and Security teams to ensure a shared understanding of security ownership.
• Mentorship: Coach and train engineers on secure coding practices, DevSecOps principles, and integrated security tooling.
• Incident Response: Support the SOC during security incidents, providing deep technical expertise for containment, root cause analysis, and automated remediation.