Cybersecurity - DevSecOps

THALES SOLUTIONS ASIA PTE. LTD.; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

THALES SOLUTIONS ASIA PTE. LTD. seeks a Cybersecurity DevSecOps Engineer to integrate security across the system lifecycle. You will drive vulnerability management, configuration audits and compliance monitoring, collaborating with DevOps, SOC and IT operations to enforce hardening and alert rules.

The role emphasizes vulnerability analysis, risk assessment, and remediation across Thales’ IT/OT environments in Singapore, with on-site delivery and global standards adherence.

Qualifications

• 5+ years in Cybersecurity field.
• Experience with CIS Benchmarks or DISA STIG frameworks.
• Ability to analyze vulnerability reports and remediate security vulnerabilities.
• Strong collaboration with DevOps, SOC, IT operations teams.

Responsibilities

• Lead vulnerability management activities across the lifecycle.
• Coordinate configuration audits and compliance monitoring.
• Tune and enhance SIEM logs and alerting for threat detection.
• Implement and verify hardening configurations for COTS products.
• Support governance, risk and audit documentation and reporting.

Skills

Vulnerability Analysis

Configuration Auditing

SIEM & Monitoring

Scripting & Automation

Compliance Frameworks

Cloud & Infrastructure

DevSecOps Tools

Soft Skills

Education

Engineering/Computer Science degree

Tools

Nessus

Nmap

Trivy

QRadar

Splunk

ELK

MITRE ATT&CK

Jenkins

GitLab CI/CD

Ansible

Terraform

Job description

Role Description

TheCybersecurity DevSecOps Engineerat Thales plays an important rolein integratingsecurity into the system lifecycle, ensuringsecure, compliant and resilientsystems. This role focuses onvulnerability management, configuration audits, compliance monitoring, and threat detectionto mitigate risks across Thales’IT and OT environments.

The Cybersecurity DevSecOps Engineer willcollaborate with cross-functional teams(DevOps, SOC, IT Operations) toautomate security controls, enforce hardening standards and security audit log configuration, correlation and alert rules, ensuring adherence to global and regional compliance frameworks(e.g.,ISO 27001, NIST, Singapore’s CCoP, ICT&SS).

Skills, Responsibilities and Activities

Vulnerability Management.

Skills include: be able to understand vulnerability scan reports to be able to identify, assess and remediate security vulnerabilities to reduce exposure to cyber threats.

Activities include:

• Vulnerability Analysis & Prioritization: Processscan reports(using tools such as Nessus, Nmap, Trivy) to identifycritical/high-severity vulnerabilities.
• Assess risks usingCVSS, EPSS, KEV, SSVCmethodologies, prioritising remediation based onbusiness impact and exploitability.
• Remediation Support: Collaborate with the relevant engineering teamsto applypatches, workarounds, or mitigations.
• Validatefix effectivenessand track remediation progress

Reporting & Documentation.

Skills: be able to draftclear, actionable reportssummarizing:

• Vulnerability details (CVE, affected systems, risk level).
• Recommendedhardening rulesorcorrective actions.
• Risk analysis(likelihood, impact, business context).
• Present findings to stakeholders (IT, Security, Management).

Audit& Monitoring.

Skills include ensuring systems aresecurely configuredandmonitoredfor threats. Activities include

• Configuration Compliance Reviews. Validation of host configurations(RHEL, Windows, Databases, Network Equipment) against:
• CIS Benchmarks
• Thales-specific hardening standards
• Other standards as required ie STIGs (Security Technical Implementation Guides)
• Identifymisconfigurationsand recommendcorrective actions.

Integration and Hardening.

Skills include ability to integrate, applying hardening benchmarks as well as customized hardening configurations to COTS products (Operating systems & network equipment) and verification of hardened configurations. Activities include:

• Selecting hardening frameworks CIS, defining custom configurations for the environment
• Application of customised hardening using automation tools
• Integration and verification of Cyber requirements for Cyber COTS (such as IAM, PAM, SIEM, EDR,EPP, Keys management, Firewall)
• Verification of hardening baseline during vulnerability scans and test campaigns

SIEM Log Enhancement and Analysis.

Skills includes Audit log tuning, analysis and acknowledge of alert frameworks. Activities include:

• Advise onlogging improvementsfor betterthreat detection(e.g.,missing logs, false positives/negatives).
• Support SIEM rule tuning, advising on the optimisation ofcorrelation rules to enhancealert accuracyinQRadar/Splunk,reducingfalsepositivesand improvingthreat detection.
• Align rules withMITRE ATT&CK frameworkandthreat intelligence feeds.
• Analysis ofSIEM/SOC alertsto determine:
• Legitimacy(true positive vs. false positive).
• Severity(usingMITRE ATT&CKfor classification).
• Required actions(containment, remediation, escalation).

Governance & Compliance.

Skills include knowledge of regulatory and internal security standards, ensuring their adherence. Activities include:

• Compliance Monitoring, trackingadherence to frameworks such as:
• Global:ISO 27001, NIST, ITIL
• Regional (Singapore):CCoP (Cybersecurity Code of Practice), ICT&SS (Infocomm Technology & Security Standards)
• Maintainingaudit evidencefor compliance assessments.
• Standards &Policy Support, assisting insecurity standards change analysis(e.g., updates toCIS, STIGs, or Thale’s policies).
• EnsuringDevSecOps practices alignwithcorporate governancerequirements.
• Risk & Gap Analysis, identifyinggapsbetweencurrent stateandrequired compliancelevels.
• Proposemitigation strategiesto close gaps.

On-Call Support.

Activities Include:

• Provide on-call support as required to the customer when restored.

Technical Skills, Qualifications & Experience

Technical Skills

Vulnerability Management : Nessus, Nmap, Trivy, CVSS, EPSS, KEV, SSVC

Configuration Auditing : STIGs, CIS Benchmarks, SCAP, OpenSCAP

SIEM & Monitoring : QRadar, Splunk, ELK, MITRE ATT&CK, Threat Intelligence

Scripting & Automation : Python, Bash, PowerShell (for report automation)

Compliance Frameworks : ISO 27001, NIST, ITIL, CCoP, ICT&SS

Cloud & Infrastructure : RHEL, Windows Server, Databases (Oracle, SQL), Network Devices

DevSecOps Tools : Jenkins, GitLab CI/CD, Ansible, Terraform (for IaC security)

Soft Skills

• Analytical Thinking: Ability tointerpret scan reports, logs, and compliance gaps.
• Stakeholder Communication: Clearreportingandcollaborationwithnon-security teams.
• Problem-Solving: Proactive inidentifying and mitigating risks.
• Attention to Detail: Ensureaccuracy in audits, reports, and remediation tracking.

A positive attitude combined with excellent interpersonal and motivational skills.

Sound judgement and independent decision-making capability where necessary

Excellent written and oral communication skills in English

Qualifications

• Degree in Engineering, Computer Science or related discipline majoring in Cybersecurity or relevant industry experience

Essential Experience

• 5+ years of proven experience in the Cybersecurity field
• Strong knowledge in Cybersecurity solutions (e.g. IAM, PAM, SIEM, EDR, Keys, Firewall)
• Demonstrated ability to achieve effective outcomes in a multidiscipline, multi-culture environment
• Experience in system hardening and hardening review based on CIS Benchmarks or DISA STIG frameworks.

Desirable:

• Industry qualifications, such as CISSP
• Postgraduate studies in Cybersecurity
  General / Special Requirements
  • Assist in ensuring a harmonious work environment in all departments that you are working with by upholding Thales' key values.
  • An advocate for diversity and inclusion who will be actively involved in implementing change initiatives to achieve our diversity goals
  • An advocate for a culture of continuous improvement
  • An advocate for Accountability, transparency and curiosity
  • Comply with all relevant company Occupational Health, Safety and Environmental policies and framework and work practices with the intent of preventing or minimising accidental exposures to self, colleagues, visitors and/or the environment and to ensure a safe work practises at all times.
  • Comply with all relevant Company policies and procedures.
  • Occasional international travel may be required
  SPECIAL REQUIREMENTS:
  • Eligible to obtain Singapore CAT2 Clearance