Senior DevSecOps Engineer: Secure SDLC & CI/CD Expert

EY GDS; Philippines; On-site; PHP 1,200,000 - 2,100,000; Full time

Job summary

EY GDS Philippines is seeking a Senior Consultant – DevSecOps / Application Security to lead end-to-end DevSecOps implementations and embed security across CI/CD pipelines. You will perform hands-on security assessments, influence design and automation, and collaborate with cross-functional teams to deploy secure, scalable applications in cloud environments.

Ideal candidates have strong experience in SSDLC, SAST/DAST/SCA, security tooling, and threat modeling, with proficiency in scripting and

Qualifications

• Hands-on security assessment experience across SDLC stages.
• Proficiency with SAST/DAST/SCA and threat modeling.
• Experience integrating security into CI/CD pipelines.

Responsibilities

• Implement SSDLC andDevSecOps across software delivery lifecycles.
• Perform app security assessments (SAST/DAST/SCA) and remediation guidance.
• Automate security tooling within CI/CD and cloud environments.
• Collaborate with DevOps, Architects, Developers and QA teams.
• Develop scripts for security testing, reporting and tool integration.
• Contribute to AI-assisted security use cases and secure design reviews.

Skills

SSDLC

DevSecOps

CI/CD

Threat modeling

Security automation

Cloud security

Scripting

OWASP

Security tooling

Education

BE/B.Tech/MCA

Tools

Jenkins

Azure DevOps

GitHub

GitLab

Burp Suite

AppScan

Checkmarx

Fortify

Veracode

Aqua

Invicti

Job description

EY GDS Philippines is seeking a Senior Consultant – DevSecOps / Application Security to lead end-to-end DevSecOps implementations and embed security across CI/CD pipelines. You will perform hands-on security assessments, influence design and automation, and collaborate with cross-functional teams to deploy secure, scalable applications in cloud environments.

Ideal candidates have strong experience in SSDLC, SAST/DAST/SCA, security tooling, and threat modeling, with proficiency in scripting and