DevSecOps Engineer

Singapore Exchange Limited; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

Singapore Exchange Limited in Singapore seeks a hands-on DevSecOps Engineer to embed security into the design, build and operation of mission-critical financial market systems. You will shape secure delivery pipelines, automate controls and enable fast, compliant software delivery.

You will partner across application, platform and cyber security teams to champion secure-by-design and shift-left practices at scale, influencing engineering practices and tooling across the organisation.

Qualifications

• 5–10 years in DevSecOps or security/platform engineering in complex, high-availability environments.
• Experience in financial services or regulated industries is advantageous.
• Strong track record leading projects with visibility to senior management.
• Hands-on knowledge of secure SDLC, CI/CD, SAST/DAST, SCA and policy-as-code.
• Practical expertise across Jenkins, GitLab CI/CD, Terraform, Docker, Kubernetes and cloud platforms.

Responsibilities

• CI/CD Engineering: Define enterprise pipeline standards and automation practices.
• Infrastructure as Code: Establish IaC standards and platform automation capabilities.
• DevSecOps: Establish DevSecOps standards and security automation patterns.
• Developer Experience (DevEx): Lead developer experience initiatives and engineering enablement.
• Platform Engineering: Lead platform engineering practices and capabilities.
• Environment Management: Lead environment strategy and engineering self-service adoption.
• Engineering Tooling: Define engineering tooling standards and governance.
• Automation Engineering: Lead enterprise workflow automation programmes.
• Compliance Automation: Establish policy-as-code and compliance automation standards.
• Platform Leadership: Lead DevOps capability development and standardisation across teams.
• Agentic AI for Platform & Operations: Lead the domain's design of reusable agentic platform services that reduce engineering toil, improve DevEx, automate compliance evidence and integrate agents into CI/CD, cloud, environment, security and observability workflows.
• Own high-visibility projects or workstreams, with clear accountability for outcomes, delivery milestones, risks, dependencies and senior management updates.
• Provide senior-level security architecture input, threat modelling and secure design guidance for new products, platforms and major technology changes.

Skills

DevSecOps

Security engineering

Platform engineering

CI/CD

IaC

SAST/DAST

SCA

Container security

Cloud: AWS

Cloud: Azure

Cloud: GCP

Python

PowerShell / Bash

Jenkins

GitLab CI/CD

Terraform

Docker

Kubernetes

ELK / Datadog

Coralogix

IAM

NIST / CIS

Education

Degree in Computer Science, Engineering, Information Security or related discipline

Tools

Jenkins

GitLab CI/CD

Terraform

Docker

Kubernetes

AWS

Azure

GCP

Python

Bash/PowerShell

ELK

Datadog

Coralogix

Job description

Select how often (in days) to receive an alert:

The DevSecOps Engineer is a hands-on security engineering role responsible for embedding security into the way SGX designs, builds and operates mission-critical financial market systems. Sitting within the Market Engineering team, you will design secure delivery pipelines, automate security controls and help engineering teams ship resilient, compliant software at speed.

This is a high-impact role for a security-minded engineer who enjoys building platforms, codifying guardrails and influencing engineering practices at scale. You will work across application, platform and cyber security teams to champion “secure by design” and “shift-left” practices without slowing delivery.

Job Responsibilities

• CI/CD Engineering: Define enterprise pipeline standards and automation practices.
• Infrastructure as Code: Establish IaC standards and platform automation capabilities.
• DevSecOps: Establish DevSecOps standards and security automation patterns.
• Developer Experience (DevEx): Lead developer experience initiatives and engineering enablement.
• Platform Engineering: Lead platform engineering practices and capabilities.
• Environment Management: Lead environment strategy and engineering self-service adoption.
• Engineering Tooling: Define engineering tooling standards and governance.
• Automation Engineering: Lead enterprise workflow automation programmes.
• Compliance Automation: Establish policy-as-code and compliance automation standards.
• Platform Leadership: Lead DevOps capability development and standardisation across teams.
• Agentic AI for Platform & Operations: Lead the domain's design of reusable agentic platform services that reduce engineering toil, improve DevEx, automate compliance evidence and integrate agents into CI/CD, cloud, environment, security and observability workflows.
• Own high-visibility projects or workstreams, with clear accountability for outcomes, delivery milestones, risks, dependencies and senior management updates.
• Provide senior-level security architecture input, threat modelling and secure design guidance for new products, platforms and major technology changes.

Job Requirements

• Experience: ~5-10 years of experience in DevSecOps, security engineering, platform engineering or technology leadership within complex, high-availability environments; financial services or regulated industry experience is strongly advantageous.
• Track record: Proven ability to lead projects, workstreams or engineering teams with clear accountability for outcomes, stakeholder alignment, risk management and execution quality, including delivering work with high management visibility.
• Technical stack: Strong hands-on knowledge of secure SDLC, CI/CD, SAST/DAST, SCA, container security, secrets management, compliance-as-code and policy-as-code, with practical expertise across Jenkins, GitLab CI/CD, Terraform, Docker, Kubernetes, AWS, Azure, GCP, Python, Bash or PowerShell, and observability platforms such as ELK, Datadog and Coralogix.
• Standards & environment: Strong grounding in IAM, encryption, secure configuration, vulnerability management, incident response, technology risk and security standards such as OWASP, NIST and CIS Benchmarks.
• Communication & leadership: Strong communication, influencing and stakeholder management skills, with the confidence to challenge constructively and guide teams toward secure, pragmatic and sustainable outcomes.
• Education & certifications: Degree in Computer Science, Engineering, Information Security or related discipline; relevant cloud, DevOps, security or architecture certifications are advantageous.