DevSecOps Engineer

Singtel; Singapore; On-site; Confidential; Full time

Job summary

Singtel is building an AI-first telco for the future, delivering secure digital services and resilient cloud platforms. We seek a Cybersecurity Governance & Vulnerability Management professional to drive remediation, governance, and automation across Singtel’s IT landscape.

You will coordinate vulnerability management, IAM governance, and security controls across AWS/Azure, with a focus on risk reduction and AI-driven security operations.

Qualifications

• Bachelor’s Degree in Computer Science, Cyber Security, Computer Engineering, or a related discipline.
• Minimum 5 years of experience in SecOps, Cybersecurity, Information Security, DevSecOps, or related roles.
• Strong experience in security governance, cyber resilience, risk management, and security control implementation.
• Experience managing Vulnerability Assessment & Management, including remediation tracking, risk prioritization, validation, and closure.
• Experience coordinating Penetration Testing, findings remediation, re-testing, and security deviations/exceptions.
• Good understanding of Identity & Access Management (IDAM/IAM), User Access Reviews (UAR), privileged/non-privileged access, RBAC, and access governance.
• Knowledge of Cloud Security across AWS/Azure, including CSPM, CWPP, cloud asset discovery, and workload security.
• Understanding of security across servers, middleware, databases, network devices, and cloud assets, including security architecture and design assessments.
• Exposure to security initiatives such as Micro-segmentation, Network Hardening, DAM, DR governance, and cyber resilience.
• Experience working closely with Information Security teams to understand security requirements, translate them into actionable plans, and drive implementation across application teams.
• Strong project and stakeholder management skills, with the ability to coordinate multiple security initiatives across application and technical teams.
• Proactively identify automation and AI-driven opportunities across security operations and governance to improve efficiency, reduce manual effort, enhance security insights, and strengthen security controls.
• Strong communication, analytical, problem-solving, and follow-up skills, with the ability to drive security actions through to closure.
• Experience in automating security and operational activities using Python, Shell, PowerShell, Ansible, APIs, or other automation tools.
• Exposure to AI/GenAI technologies and AI-assisted security use cases, such as security event analysis, vulnerability prioritization, compliance reporting, and security operations automation.
• Good understanding of DevOps / DevSecOps practices and CI/CD pipelines.
• Understanding of integrating SAST, SCA, vulnerability scanning, secrets scanning, and security quality gates into CI/CD pipelines.
• Exposure to technologies such as Jenkins/Bamboo, Git, Bitbucket, Ansible, Docker, Kubernetes, Linux, and AWS/Azure.
• Experience with security tools such as Tenable, Fortify, SonarQube, Nexus IQ, or equivalent.
• Knowledge of ISO 27001, CIS Controls, or similar security frameworks.
• Relevant security or cloud certifications such as CISSP, CCSP, Security+, AWS/Azure Security, or equivalent would be an advantage

Responsibilities

• Drive cybersecurity risk remediation, security governance and control implementation across Singtel’s IT infrastructure, applications and cloud environments.
• Coordinate vulnerability assessment and management, including remediation tracking, risk prioritization, validation and closure.
• Lead IAM/access governance activities covering privileged and non-privileged access, RBAC and periodic access reviews.
• Work with information security and application teams to translate security requirements into actionable remediation plans.
• Support security controls across applications, servers, middleware, databases, networks and cloud environments (AWS/Azure).
• Identify automation and AI opportunities to improve security operations, vulnerability management, compliance and governance.
• Track security actions, risks, dependencies and milestones, with clear management reporting through to closure.
• Collaborate with stakeholders to drive security initiatives across multiple teams and ensure delivery.

Skills

SecOps

Cybersecurity

Information Security

DevSecOps

Security governance

Risk management

IAM

RBAC

Penetration testing

Vulnerability mgmt

Cloud security

Automation

Python

GenAI in security

DevOps / DevSecOps

CI/CD security

SAST/SCA

Jenkins

Kubernetes

Education

Bachelor’s Degree in Computer Science, Cyber Security, Computer Engineering

Tools

Jenkins

Bamboo

Git

Bitbucket

Ansible

Docker

Kubernetes

Linux

AWS

Azure

Tenable

Fortify

SonarQube

Nexus IQ

Job description

Singtel is where Technology meets Purpose.

We're building an AI-first telco for the future—connecting people, businesses and communities through trusted networks, intelligent digital services and next-generation technology.

From transforming everyday experiences in mobile, broadband, entertainment and lifestyle services to enabling enterprises with AI, 5G+, cloud, cybersecurity, data centres and digital platforms, we create the technology that powers how millions live, work and connect.

At Singtel, your work creates real impact. You'll solve meaningful challenges, shape critical digital infrastructure and help build secure, resilient and AI-enabled solutions that serve businesses, digital ecosystems and communities across the globe.

This is where BIG Possibilities become reality. Whether you're engineering intelligent networks, advancing sovereign AI cloud platforms, strengthening cybersecurity, designing seamless customer experiences or driving sustainable innovation, you'll be part of teams shaping the future of technology.

Backed by decades of expertise and driven by a culture of continuous learning and innovation, Singtel offers the scale, opportunities and support to help you grow your career while making a difference where it matters most.

Be a Part of Something BIG!

As a Cybersecurity Governance & Vulnerability Management professional, you will drive cybersecurity risk remediation, security governance and control implementation across Singtel’s IT infrastructure, applications and cloud environments. You will work closely with technical and business stakeholders to manage vulnerabilities, coordinate penetration testing, strengthen identity and access governance, and enhance cyber resilience. You will also identify opportunities to leverage automation, AI and DevSecOps practices to improve security operations and compliance.

Make an Impact by:

• Drive Vulnerability Assessment & Management, including risk prioritisation, remediation tracking, validation and closure.
• Coordinate penetration testing, remediation, re-testing and management of security deviations/exceptions.
• Drive IAM/access governance activities covering privileged and non-privileged access, RBAC and periodic access reviews.
• Work with Information Security and application teams to translate security requirements into actionable remediation and implementation plans.
• Support security controls across applications, servers, middleware, databases, networks and AWS/Azure cloud environments.
• Support security initiatives including segmentation, network hardening, DAM, DR/cyber resilience and cloud security and etc.
• Track security actions, risks, dependencies and milestones, and provide clear management reporting through to closure.
• Identify and implement automation and AI opportunities to improve security operations, vulnerability management, compliance and governance.

Skills for Success:

• Bachelor’s Degree in Computer Science, Cyber Security, Computer Engineering, or a related discipline
• Minimum 5 years of experience in SecOps, Cybersecurity, Information Security, DevSecOps, or related roles.
• Strong experience in security governance, cyber resilience, risk management, and security control implementation.
• Experience managing Vulnerability Assessment & Management, including remediation tracking, risk prioritization, validation, and closure.
• Experience coordinating Penetration Testing, findings remediation, re-testing, and security deviations/exceptions.
• Good understanding of Identity & Access Management (IDAM/IAM), User Access Reviews (UAR), privileged/non-privileged access, RBAC, and access governance.
• Knowledge of Cloud Security across AWS/Azure, including CSPM, CWPP, cloud asset discovery, and workload security.
• Understanding of security across servers, middleware, databases, network devices, and cloud assets, including security architecture and design assessments.
• Exposure to security initiatives such as Micro-segmentation, Network Hardening, Database Activity Monitoring (DAM), DR governance, and cyber resilience.
• Experience working closely with Information Security teams to understand security requirements, translate them into actionable plans, and drive implementation across application teams.
• Strong project and stakeholder management skills, with the ability to coordinate multiple security initiatives across application and technical teams.
• Ability to manage implementation plans, milestones, risks, dependencies, remediation actions, and deliverables, with clear management-level status reporting.
• Proactively identify automation and AI-driven opportunities across security operations and governance to improve efficiency, reduce manual effort, enhance security insights, and strengthen security controls.
• Strong communication, analytical, problem-solving, and follow-up skills, with the ability to drive security actions through to closure.
• Experience in automating security and operational activities using Python, Shell, PowerShell, Ansible, APIs, or other automation tools.
• Exposure to AI/GenAI technologies and AI-assisted security use cases, such as security event analysis, vulnerability prioritization, compliance reporting, and security operations automation.
• Good understanding of DevOps / DevSecOps practices and CI/CD pipelines.
• Understanding of integrating SAST, SCA, vulnerability scanning, secrets scanning, and security quality gates into CI/CD pipelines.
• Exposure to technologies such as Jenkins/Bamboo, Git, Bitbucket, Ansible, Docker, Kubernetes, Linux, and AWS/Azure.
• Experience with security tools such as Tenable, Fortify, SonarQube, Nexus IQ, or equivalent.
• Knowledge of ISO 27001, CIS Controls, or similar security frameworks.
• Relevant security or cloud certifications such as CISSP, CCSP, Security+, AWS/Azure Security, or equivalent would be an advantage

Are you ready to say hello to BIG Possibilities?

Join Singtel to shape what's next and accelerate your career through meaningful work, continuous learning, and real impact.

Take the leap with Singtel to shape what’s next and accelerate your growth.