DevSecOps Engineer

XCELLINK PTE. LTD.; Singapore; On-site; SGD 70,000 - 100,000; Full time

Job summary

A leading technology firm in Singapore is seeking a skilled DevSecOps Engineer to ensure security in all phases of the software development lifecycle. You will integrate security practices into DevOps processes, conduct vulnerability assessments, and design secure infrastructure. The ideal candidate has a degree in Computer Science or a related field, hands-on experience with tools like Jenkins and Docker, and proficiency in scripting languages. Relevant security certifications are a plus.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or related field.
• Hands-on experience with DevOps tools like Jenkins, Docker, and Kubernetes.
• Proficiency in scripting languages such as Python or Bash.

Responsibilities

• Integrate security into DevOps processes during CI/CD.
• Design secure cloud and on-premises infrastructure.
• Conduct vulnerability assessments and risk analysis.

Skills

DevOps tools

Scripting languages

Security frameworks

Cloud platform security

Monitoring and logging

Education

Bachelor’s degree in Computer Science or Information Security

Tools

Jenkins

Docker

Kubernetes

Terraform

Job description

We are seeking a skilled and proactive DevSecOps Engineer to join our dynamic technology team. The ideal candidate will be responsible for integrating security into every phase of the software development and deployment lifecycle, ensuring that our applications and infrastructure are robust, secure, and compliant with industry standards.

Key Responsibilities

• Embed security practices and principles into DevOps processes, automating security checks and controls throughout CI/CD pipelines.
• Collaborate with development, operations, and security teams to design and implement secure cloud and on-premises infrastructure.
• Conduct regular vulnerability assessments, threat modeling, and risk analysis to identify security gaps and recommend solutions.
• Develop and maintain security automation tools and scripts to enforce policies and monitor environments.
• Monitor, detect, and respond to security incidents, coordinating incident response activities as required.
• Stay current on emerging security technologies, threats, and best practices; proactively recommend improvements.
• Document security processes, procedures, and compliance controls, ensuring regulatory and policy adherence.
• Educate and train team members on secure coding, DevSecOps methodologies, and threat awareness.

Qualifications and Skills

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• Hands-on experience with DevOps tools (e.g., Jenkins, GitLab CI/CD, Docker, Kubernetes, Terraform).
• Proficiency in scripting languages (e.g., Python, Bash, PowerShell).
• Strong understanding of security frameworks, standards, and best practices (e.g., OWASP, NIST, CIS).
• Experience with cloud platforms (e.g., AWS, Azure, GCP) and their security features.
• Knowledge of infrastructure-as-code (IaC) and security automation.
• Familiarity with monitoring, logging, and SIEM solutions.
• Excellent problem-solving, analytical, and communication skills.
• Relevant certifications (e.g., AWS Certified Security, Certified DevSecOps Professional, CISSP) are a plus.