DevSecOps Engineer

Singapore Telecommunications Limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Singtel is seeking a senior Cybersecurity Governance & Vulnerability Management professional to drive risk remediation across Singtel’s IT infrastructure, applications and cloud environments. You will collaborate with technical and business stakeholders to manage vulnerabilities, coordinate testing, strengthen IAM governance, and enhance cyber resilience.

You will identify automation and AI opportunities to improve security operations, support security controls across servers, databases,

Qualifications

• Bachelor’s degree in CS/Cyber Security/Engineering or related field.
• Minimum 5 years in SecOps, cyber security, or DevSecOps.
• Strong governance, resilience, risk management and control implementation.

Responsibilities

• Drive Vulnerability Assessment & Management, including risk prioritisation, remediation tracking, validation and closure.
• Coordinate penetration testing, remediation, re-testing and management of security deviations/exceptions.
• Drive IAM/access governance activities covering privileged and non-privileged access, RBAC and periodic access reviews.
• Work with Information Security and application teams to translate security requirements into actionable remediation plans.
• Support security controls across applications, servers, middleware, databases, networks and cloud environments (AWS/Azure).
• Support security initiatives like segmentation, network hardening, DAM, DR governance and cloud security.
• Track security actions, risks, dependencies and milestones, with clear reporting to closure.
• Identify automation and AI opportunities to improve security operations and governance.

Skills

Security governance

Vulnerability management

IAM / access governance

DevSecOps

Cloud security AWS/Azure

Automation (Python)

CI/CD pipelines

Security architecture & design

Education

Bachelor’s Degree in Computer Science/Cyber Security/Computer Engineering

Tools

Tenable

Fortify

SonarQube

Nexus IQ

Jenkins

Git

Docker

Kubernetes

Job description

Singtel is where Technology meets Purpose.

We're building an AI-first telco for the future—connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.

From transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.

At Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.

This is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.

Backed by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.

Be a Part of Something BIG!

As a Cybersecurity Governance & Vulnerability Management professional, you will drive cybersecurity risk remediation, security governance and control implementation across Singtel’s IT infrastructure, applications and cloud environments. You will work closely with technical and business stakeholders to manage vulnerabilities, coordinate penetration testing, strengthen identity and access governance, and enhance cyber resilience. You will also identify opportunities to leverage automation, AI and DevSecOps practices to improve security operations and compliance.

Make an Impact by:

• Drive Vulnerability Assessment & Management, including risk prioritisation, remediation tracking, validation and closure.
• Coordinate penetration testing, remediation, re-testing and management of security deviations/exceptions.
• Drive IAM/access governance activities covering privileged and non-privileged access, RBAC and periodic access reviews.
• Work with Information Security and application teams to translate security requirements into actionable remediation and implementation plans.
• Support security controls across applications, servers, middleware, databases, networks and AWS/Azure cloud environments.
• Support security initiatives including segmentation, network hardening, DAM, DR/cyber resilience and cloud security and etc.
• Track security actions, risks, dependencies and milestones, and provide clear management reporting through to closure.
• Identify and implement automation and AI opportunities to improve security operations, vulnerability management, compliance and governance.

Skills for Success:

• Bachelor’s Degree in Computer Science, Cyber Security, Computer Engineering, or a related discipline
• Minimum 5 years of experience in SecOps, Cybersecurity, Information Security, DevSecOps, or related roles.
• Strong experience in security governance, cyber resilience, risk management, and security control implementation.
• Experience managing Vulnerability Assessment & Management, including remediation tracking, risk prioritization, validation, and closure.
• Experience coordinating Penetration Testing, findings remediation, re-testing, and security deviations/exceptions.
• Good understanding of Identity & Access Management (IDAM/IAM), User Access Reviews (UAR), privileged/non-privileged access, RBAC, and access governance.
• Knowledge of Cloud Security across AWS/Azure, including CSPM, CWPP, cloud asset discovery, and workload security.
• Understanding of security across servers, middleware, databases, network devices, and cloud assets, including security architecture and design assessments.
• Exposure to security initiatives such as Micro-segmentation, Network Hardening, Database Activity Monitoring (DAM), DR governance, and cyber resilience.
• Experience working closely with Information Security teams to understand security requirements, translate them into actionable plans, and drive implementation across application teams.
• Strong project and stakeholder management skills, with the ability to coordinate multiple security initiatives across application and technical teams.
• Ability to manage implementation plans, milestones, risks, dependencies, remediation actions, and deliverables, with clear management-level status reporting.
• Proactively identify automation and AI-driven opportunities across security operations and governance to improve efficiency, reduce manual effort, enhance security insights, and strengthen security controls.
• Strong communication, analytical, problem-solving, and follow-up skills, with the ability to drive security actions through to closure.
• Experience in automating security and operational activities using Python, Shell, PowerShell, Ansible, APIs, or other automation tools.
• Exposure to AI/GenAI technologies and AI-assisted security use cases, such as security event analysis, vulnerability prioritization, compliance reporting, and security operations automation.
• Good understanding of DevOps / DevSecOps practices and CI/CD pipelines.
• Understanding of integrating SAST, SCA, vulnerability scanning, secrets scanning, and security quality gates into CI/CD pipelines.
• Exposure to technologies such as Jenkins/Bamboo, Git, Bitbucket, Ansible, Docker, Kubernetes, Linux, and AWS/Azure.
• Experience with security tools such as Tenable, Fortify, SonarQube, Nexus IQ, or equivalent.
• Knowledge of ISO 27001, CIS Controls, or similar security frameworks.
• Relevant security or cloud certifications such as CISSP, CCSP, Security+, AWS/Azure Security, or equivalent would be an advantage

Are you ready to say hello to BIG Possibilities?

Join Singtel to shape what's next and accelerate your career through meaningful work, continuous learning, and real impact.

Take the leap with Singtel to shape what’s next and accelerate your growth.