Senior DevSecOps Lead – Secure SDLC & AI‑Driven Security

EY; Cebu City; On-site; PHP 1,800,000 - 3,000,000; Full time

Job summary

EY’s Cyber Security team is seeking a Senior Consultant – DevSecOps / Application Security to embed security across the software lifecycle and CI/CD pipelines. You’ll partner with DevOps, Architects, Developers and QA to deliver secure, scalable application delivery while shaping SaC, automation, and cloud-native security controls.

You will perform hands-on security assessments (SAST/DAST/SCA), provide remediation guidance, and contribute to AI-assisted security use cases as part of a modern

Qualifications

• BE/ B.Tech/ MCA.
• Certifications: AZ-500 or AWS SCS-C01 required.
• Knowledge of Windows, Linux, UNIX and other major OS.
• Strong Excel and PowerPoint skills.

Responsibilities

• Implement Secure SDLC (SSDLC) across application development and CI/CD pipelines.
• Perform application security assessments including SAST, DAST, SCA.
• Integrate and automate security tools within CI/CD pipelines.
• Support development teams in secure coding practices and remediation.
• Collaborate with DevOps and cloud teams to implement security controls.

Skills

SAST

DAST

SCA

CI/CD

DevSecOps

Python

PowerShell

AWS

Azure

GCP

OWASP Top 10

Education

BE/B.Tech/MCA

Tools

Jenkins

Azure DevOps

GitHub

GitLab

Burp Suite

Veracode

Checkmarx

Fortify

Job description

EY’s Cyber Security team is seeking a Senior Consultant – DevSecOps / Application Security to embed security across the software lifecycle and CI/CD pipelines. You’ll partner with DevOps, Architects, Developers and QA to deliver secure, scalable application delivery while shaping SaC, automation, and cloud-native security controls.

You will perform hands-on security assessments (SAST/DAST/SCA), provide remediation guidance, and contribute to AI-assisted security use cases as part of a modern