DevSecOps Engineer

Talent-Merge; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Talent-Merge in Singapore is seeking a DevSecOps professional to integrate security into the software lifecycle, enhance CI/CD pipelines, and automate infrastructure provisioning.

You will evaluate vulnerabilities across cloud environments, containers, and applications, implement security tools, collaborate with engineering teams, and promote DevSecOps guardrails and documentation.

Qualifications

• Bachelor’s degree or equivalent in CS/IT/Cybersecurity or related field.
• 3–5 years of experience in DevOps, DevSecOps, cloud engineering, or related technical field.
• Strong knowledge of CI/CD, infrastructure-as-code, version control, scripting, container tech, and cloud platforms (AWS/Azure/GCP).
• Practical understanding of security across apps and infra, including vulnerability management and secure coding practices.
• Strong analytical, communication, and stakeholder management skills across teams.

Responsibilities

• Integrate security controls and best practices across the SDLC.
• Develop and improve CI/CD pipelines for secure, reliable releases.
• Automate provisioning, configuration, and security with IaC and scripting.
• Evaluate vulnerabilities across apps, clouds, containers, and infra; propose remediation.

Skills

CI/CD

IaC

Cloud platforms

Vulnerability mgmt

Security testing

Access controls

Scripting

Containers

Collaboration

Stakeholder mgmt

Education

Bachelor’s degree in Computer Science or related field

Job description

Responsibilities

• Integrate security controls and best practices throughout the software development and deployment lifecycle.




• Develop and improve CI/CD pipelines to support secure, efficient, and reliable application releases.




• Automate infrastructure provisioning, configuration, and security processes using infrastructure-as-code and scripting tools.




• Evaluate vulnerabilities across applications, cloud environments, containers, and infrastructure, and recommend appropriate remediation measures.




• Implement and manage application security tools such as SAST, DAST, SCA, secrets management, and vulnerability scanning solutions.




• Collaborate with development, security, cloud, and operations teams to embed security into engineering processes and workflows.




• Strengthen cloud and container security by applying appropriate access controls, configurations, monitoring, and security standards.




• Review security findings, assess associated risks, and coordinate remediation activities with relevant technical teams.




• Support the development of DevSecOps standards, security guardrails, technical documentation, and operational procedures.




• Promote continuous improvement of security automation, engineering practices, and DevSecOps capabilities across technology environments.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.




• 3-5 years of relevant experience in DevOps, DevSecOps, cloud engineering, application security, cybersecurity, or a related technical field.




• Strong knowledge of CI/CD, infrastructure-as-code, version control, scripting or automation, container technologies, and cloud platforms such as AWS, Azure, or GCP.




• Practical understanding of application and infrastructure security, including vulnerability management, secure coding practices, security testing, access controls, and cloud security principles.




• Strong analytical, problem-solving, communication, and stakeholder management skills, with the ability to work effectively across development, security, and operations teams.

Clarence Khoh
R1552376