Cyber Security Specialist (DevSecOps Project Manager)

OPTIMUM SOLUTIONS (SINGAPORE) PTE LTD; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

OPTIMUM SOLUTIONS (SINGAPORE) PTE LTD is seeking a DevSecOps-focused Project Manager to lead capability delivery for Enterprise Cybersecurity Engineering. You will drive Secure SDLC integration, govern project scope, timelines, and budgets, and align cross-functional teams across engineering, architecture, and operations in Singapore.

Ideal candidates bring hands-on DevSecOps, secure SDLC expertise, and stakeholder communication skills, with PMP or Cloud/Security certifications considered

Qualifications

• Qualification in Information Technology, Computer Science, or equivalent practical experience.
• Track record in technical project management delivering security or DevSecOps initiatives, ideally in financial services or asset management.
• Practical experience with Secure SDLC practices, CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins), containers/orchestration (Docker, Kubernetes), IaC (Terraform, CloudFormation), and Policy-as-Code (OPA).
• Solid grounding in OWASP Top 10, cryptography basics, supply-chain security (SBOM, SLSA), and operational cloud security (Microsoft Sentinel, AWS Security Hub, GuardDuty, CloudTrail, CSPM).
• Hands-on knowledge of threat modeling, secure design reviews, risk assessments, and vulnerability management.
• PMP, Cloud Architect/Security, or DevSecOps certifications are advantageous.

Responsibilities

• Secure SDLC Delivery: Drive end-to-end integration of security principles and automated gates across all software development stages.
• Project Governance: Define project scope, tasks, timelines, and budgets while actively managing cross-workstream risks, dependencies, and change requests.
• Cross-Functional Alignment: Partner with engineering, architecture, operations, and procurement teams to align workflows and deliverables.
• Executive Reporting: Maintain project dashboards, status reports, and executive summaries to ensure complete transparency for leadership.

Skills

DevSecOps

Project management

Threat modeling

Security architecture

Education

Information Technology / Computer Science degree

Tools

GitLab CI

GitHub Actions

Jenkins

Docker

Kubernetes

Terraform

CloudFormation

OPA

Job description

In this role, you will lead DevSecOps capability delivery for Enterprise Cybersecurity Engineering. This role combines project management with Secure Software Development Life Cycle (Secure SDLC) expertise to manage complex security initiatives, align cross-functional teams, and deliver business-aligned security outcomes on schedule and within budget.

Key Responsibilities

• Secure SDLC Delivery: Drive end-to-end integration of security principles and automated gates across all software development stages.
• Project Governance: Define project scope, tasks, timelines, and budgets while actively managing cross-workstream risks, dependencies, and change requests.
• Cross-Functional Alignment: Partner with engineering, architecture, operations, and procurement teams to align workflows and deliverables.
• Executive Reporting: Maintain project dashboards, status reports, and executive summaries to ensure complete transparency for leadership.

Requirements:

• Technical Background: Qualification in Information Technology, Computer Science, or equivalent practical experience.
• Project Management: Track record in technical project management delivering security or DevSecOps initiatives, ideally in financial services or asset management.
• CI/CD & Security Tooling: Practical experience with Secure SDLC practices, CI/CD pipelines (GitLab CI, GitHub Actions, Jenkins), containers/orchestration (Docker, Kubernetes), IaC (Terraform, CloudFormation), and Policy-as-Code (OPA).
• Application & Cloud Security: Solid grounding in OWASP Top 10, cryptography basics, supply-chain security (SBOM, SLSA), and operational cloud security (Microsoft Sentinel, AWS Security Hub, GuardDuty, CloudTrail, CSPM).
• Risk & Threat Assessment: Hands-on knowledge of threat modeling, secure design reviews, risk assessments, and vulnerability management.
• Certifications: PMP, Cloud Architect/Security, or DevSecOps certifications are advantageous.