Senior DevSecOps Lead — Cloud Security & CI/CD Architect

NCS Group; Taguig; On-site; PHP 1,500,000 - 2,300,000; Full time

Job summary

NCS Group is seeking a DevSecOps Lead to drive security into our DevOps lifecycle and cloud infrastructure. You will design, implement, and secure scalable environments while ensuring compliance with industry standards.

The role emphasizes collaboration with development, operations, and security teams, conducting regular security assessments, and guiding the organization in best practices for secure CI/CD and incident response.

Qualifications

• Deep expertise in cloud services (EC2, S3, RDS, Lambda, IAM, VPC, CloudFormation, etc.).
• Proficiency with infrastructure as code tools such as Terraform or CloudFormation.
• Extensive experience with CI/CD tools like Jenkins, GitLab CI, or CodePipeline.
• Strong knowledge of advanced security best practices and frameworks (NIST, CIS, OWASP).
• Experience with GuardDuty, Inspector, and WAF.
• Proficiency in scripting languages (Python, Bash, PowerShell).
• Familiarity with Docker and Kubernetes and their security aspects.
• Solid understanding of networking and network security concepts.

Responsibilities

• Lead the design, implementation, and management of secure, scalable cloud infrastructure.
• Develop and implement advanced security practices within the DevOps lifecycle.
• Architect and maintain CI/CD pipelines with integrated security checks.
• Ensure compliance with GDPR, HIPAA, PCI-DSS, and internal standards.
• Lead incident response activities and root-cause analysis; remediation planning.
• Collaborate with development, operations, and security teams; mentor peers.

Skills

Cloud services

Infrastructure as code

CI/CD tools

Security best practices

Scripting languages

Containerization

Network security

Tools

Terraform

CloudFormation

Jenkins

GitLab CI

CodePipeline

GuardDuty

Inspector

WAF

Docker

Kubernetes

Job description

NCS Group is seeking a DevSecOps Lead to drive security into our DevOps lifecycle and cloud infrastructure. You will design, implement, and secure scalable environments while ensuring compliance with industry standards.

The role emphasizes collaboration with development, operations, and security teams, conducting regular security assessments, and guiding the organization in best practices for secure CI/CD and incident response.