DevSecOps Engineer

Triple-A; Singapore; On-site; SGD 90,000 - 120,000; Full time

Job summary

Triple-A is a global payment institution actively hiring a DevSecOps security engineer in Singapore. You will accelerate secure DevOps practices, integrate security into CI/CD, and design secure infrastructure using Terraform and Ansible.

Responsibilities include automating security tests, monitoring incidents, and mentoring teams. Strong scripting in Bash/Python/Perl and cloud security experience across AWS/GCP/Azure are required, with knowledge of NIST/ISO 27001/CIS benchmarks.

Qualifications

• Bachelor's degree in computer science, cybersecurity or related field.
• Minimum 3 years of experience in a DevOps or DevSecOps role.
• Strong scripting skills in Bash, Perl, Python, etc.
• Hands-on experience with cloud security best practices on AWS/GCP/Azure.
• Working knowledge of containerization tools like Kubernetes and Docker.
• Familiarity with security tools like SonarQube, OWASP ZAP, Snyk, etc.
• Understanding of security protocols like SSL/TLS, encryption, RBAC, etc.
• Experience with automation tools like Ansible, Terraform, etc.
• Knowledge of security frameworks like NIST, ISO 27001, CIS Benchmarks
• Strong problem-solving and debugging abilities
• Excellent written and verbal communication skills

Responsibilities

• Collaborate closely with development and operations teams to integrate security practices into the DevOps pipeline
• Design, implement and maintain secure infrastructure as code using Terraform, Ansible, etc.
• Automate security testing and compliance checks as part of CI/CD pipelines
• Monitor, investigate and respond to potential security incidents and vulnerabilities
• Perform secure code reviews and static/dynamic application security testing (SAST/DAST)
• Provide security training and mentorship to cross-functional teams
• Stay updated on latest security threats, tools and mitigation techniques

Skills

DevSecOps

Bash

Python

Perl

RBAC

SSL/TLS

NIST

ISO 27001

CIS Benchmarks

Education

Bachelor's degree in computer science, cybersecurity or related field

Tools

Kubernetes

Docker

Terraform

Ansible

Snyk

OWASP ZAP

SonarQube

Job description

Triple-A is a global payment institution licensed in the United States, Europe, and Singapore, enabling businesses worldwide to pay and get paid in both local and digital currencies.

We empower businesses to reach over 560M digital currency owners, boost revenue, and optimise costs through stablecoin and cryptocurrency payments, while eliminating volatility, custody, and compliance risks. Our commitment is to build a more efficient, inclusive global payment ecosystem by bridging the gap between local and digital currencies.

Registered with the United States Financial Crimes Enforcement Network (FinCEN), licensed by the Monetary Authority of Singapore (MAS), and Banque de France’s ACPR in Europe, Triple-A is trusted by over 20,000 businesses worldwide to make global crypto payments simple, secure, and cost-effective. For more information, visit www.triple-a.io.

Join the team

We are a dynamic and passionate team building towards a more efficient global payment ecosystem. We are actively bridging the gaps in cross-border payments, between traditional & digital currencies, and web2 and web3.

Guided by our CEO, Eric Barbier who brings 20 years of experience and a proven track record in building and scaling payment companies worldwide, Triple-A is growing our team. If you're bold, tenacious, and creative, we believe you'd be a perfect match for us!

• Collaborate closely with development and operations teams to integrate security practices into the DevOps pipeline
• Design, implement and maintain secure infrastructure as code using tools like Terraform, Ansible, etc.
• Automate security testing and compliance checks as part of CI/CD pipelines
• Monitor, investigate and respond to potential security incidents and vulnerabilities
• Perform secure code reviews and static/dynamic application security testing (SAST/DAST)
• Provide security training and mentorship to cross-functional teams
• Stay updated on latest security threats, tools and mitigation techniques

Required Skills & Experience:

• Bachelor's degree in computer science, cybersecurity or related field
• Minimum 3 years of experience in a DevOps or DevSecOps role
• Strong scripting skills in languages like Bash, Perl, Python, etc.
• Hands-on experience with cloud security best practices on AWS/GCP/Azure
• Working knowledge of containerization tools like Kubernetes and Docker
• Familiarity with security tools like SonarQube, OWASP ZAP, Snyk, etc.
• Understanding of security protocols like SSL/TLS, encryption, RBAC, etc.
• Experience with automation tools like Ansible, Terraform, etc.
• Knowledge of security frameworks like NIST, ISO 27001, CIS Benchmarks
• Strong problem-solving and debugging abilities
• Excellent written and verbal communication skills

Preferred Skills:

• Cloud security certifications
• Experience in the blockchain networks or fintech industry
• Knowledge of GDPR and other relevant security regulations