Cyber Security Specialist (DevSecOps Project Manager)

OPTIMUM SOLUTIONS (SINGAPORE) PTE LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Optimum Solutions (Singapore) Pte Ltd is seeking a DevSecOps capability lead to drive secure SDLC delivery, partnering with engineering, architecture, operations, and procurement to align security outcomes with business goals. You will manage complex security initiatives, deliver on time and within budget, and provide executive dashboards for leadership.

You will guide cross-functional teams through risk assessments, threat modeling, and policy automation using GitLab CI, GitHub Actions, Docker,

Qualifications

• Experience delivering security initiatives in a technical program.
• Experience with Secure SDLC delivery and CI/CD pipelines.
• Knowledge of OWASP Top 10 and cryptography basics.
• Familiarity with SBOM and SLSA supply chain security.
• Experience in financial services or asset management preferred.

Responsibilities

• Drive end-to-end Secure SDLC delivery across software projects.
• Define project scope, tasks, timelines, and budgets.
• Coordinate cross-workstream risks, dependencies and changes.
• Produce executive dashboards and status summaries for leadership.

Skills

Project management

Cross-functional alignment

Risk assessment

Threat modeling

Education

IT or CS degree

Tools

GitLab CI

GitHub Actions

Jenkins

Docker

Kubernetes

Terraform

CloudFormation

OPA

Job description

In this role, you will lead DevSecOps capability delivery for Enterprise Cybersecurity Engineering. This role combines project management with Secure Software Development Life Cycle (Secure SDLC) expertise to manage complex security initiatives, align cross-functional teams, and deliver business-aligned security outcomes on schedule and within budget.

Key Responsibilities

• Secure SDLC Delivery: Drive end-to-end integration of security principles and automated gates across all software development stages.
• Project Governance: Define project scope, tasks, timelines, and budgets while actively managing cross-workstream risks, dependencies, and change requests.
• Cross-Functional Alignment: Partner with engineering, architecture, operations, and procurement teams to align workflows and deliverables.
• Executive Reporting: Maintain project dashboards, status reports, and executive summaries to ensure complete transparency for leadership.

Requirements:

• Technical Background: Qualification in Information Technology, Computer Science, or equivalent practical experience.
• Project Management: Track record in technical project management delivering security or DevSecOps initiatives, ideally in financial services or asset management.
• CI/CD & Security Tooling: Practical experience with Secure SDLC practices, CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins), containers/orchestration (Docker, Kubernetes), IaC (Terraform, CloudFormation), and Policy-as-Code (OPA).
• Application & Cloud Security: Solid grounding in OWASP Top 10, cryptography basics, supply-chain security (SBOM, SLSA), and operational cloud security (Microsoft Sentinel, AWS Security Hub, GuardDuty, CloudTrail, CSPM).
• Risk & Threat Assessment: Hands-on knowledge of threat modeling, secure design reviews, risk assessments, and vulnerability management.
• Certifications: PMP, Cloud Architect/Security, or DevSecOps certifications are advantageous.