AVP/VP, DevSecOps Engineer

Kerry Consulting; Singapore; On-site; SGD 150,000 - 210,000; Full time

Job summary

Kerry Consulting in Singapore seeks an experienced DevSecOps / Platform Security Engineer to strengthen security across modern engineering platforms and software delivery.

This hands-on role focuses on secure CI/CD, platform engineering, security automation and embedding secure-by-design practices across the development lifecycle.

Qualifications

• 6–12 years in DevSecOps, security/platform/cloud engineering.
• Strong secure SDLC, CI/CD, SAST/DAST, SCA, container security, secrets management, policy-as-code.
• Familiar with OWASP, NIST, CIS and security standards.

Responsibilities

• Design and enhance secure CI/CD pipelines and reusable automation patterns.
• Embed automated security testing and controls across the software development lifecycle.
• Develop Infrastructure-as-Code and self-service platform capabilities.
• Drive security automation, policy-as-code and automated compliance/evidence collection.
• Improve developer experience through better tooling, workflows and platform services.
• Develop AI and agent-based automation to improve engineering, security and operational processes.
• Provide security architecture and threat modelling guidance for new applications and technology changes.
• Lead key engineering workstreams and collaborate with application, cloud, platform and cybersecurity teams.
• Drive adoption of secure engineering standards and continuously improve platform security and resilience.

Skills

DevSecOps

Security engineering

Platform engineering

Automation

Scripting

Policy-as-code

Tools

Jenkins

GitLab CI/CD

Terraform

Docker

Kubernetes

AWS

Azure

GCP

Job description

We are looking for an experienced DevSecOps / Platform Security Engineer to strengthen security across modern engineering platforms and software delivery.

This is a hands-on role focused on secure CI/CD, platform engineering, security automation and embedding secure-by-design practices across the development lifecycle.

Key Responsibilities:

• Design and enhance secure CI/CD pipelines and reusable automation patterns.
• Embed automated security testing and controls across the software development lifecycle.
• Develop Infrastructure-as-Code and self-service platform capabilities.
• Drive security automation, policy-as-code and automated compliance/evidence collection.
• Improve developer experience through better tooling, workflows and platform services.
• Develop AI and agent-based automation to improve engineering, security and operational processes.
• Provide security architecture and threat modelling guidance for new applications and technology changes.
• Lead key engineering workstreams and collaborate with application, cloud, platform and cybersecurity teams.
• Drive adoption of secure engineering standards and continuously improve platform security and resilience.

Requirements:

• 6-12 years of experience across DevSecOps, security engineering, platform engineering or cloud engineering.
• Strong knowledge of secure SDLC, CI/CD, SAST/DAST, SCA, container security, secrets management and policy-as-code.
• Experience with technologies such as Jenkins, GitLab CI/CD, Terraform, Docker, Kubernetes and AWS/Azure/GCP.
• Scripting and automation experience using Python, Bash, PowerShell or similar.
• Good understanding of IAM, vulnerability management, secure configuration and security standards such as OWASP, NIST and CIS.