DevSecOps Engineer

Talent-Merge Pte Ltd; Singapore; On-site; SGD 89,000 - 97,000; Full time

Job summary

Talent-Merge Pte Ltd is hiring a DevSecOps Engineer to secure and automate the software lifecycle in a cloud environment. The role focuses on integrating security controls and improving CI/CD pipelines across teams.

You will implement IaC, automate infrastructure, and manage SAST/DAST/SCA tools, collaborating with security, dev, and operations to raise engineering standards.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
• 3–5 years of relevant experience in DevOps, DevSecOps, cloud engineering, application security, cybersecurity, or related field.
• Strong knowledge of CI/CD, infrastructure-as-code, version control, scripting or automation, container technologies, and cloud platforms (AWS/Azure/GCP).
• Understanding of vulnerability management, secure coding practices, security testing, access controls, and cloud security principles.
• Strong analytical and communication skills with ability to work across development, security, and operations teams.

Responsibilities

• Integrate security controls across the software development and deployment lifecycle.
• Develop and improve CI/CD pipelines to support secure, efficient releases.
• Automate infrastructure provisioning, configuration, and security processes using IaC and scripting tools.
• Evaluate vulnerabilities across applications, cloud environments, containers, and infrastructure; recommend remediation.
• Implement and manage SAST, DAST, SCA, secrets management, and vulnerability scanning solutions.
• Collaborate with development, security, cloud, and operations teams to embed security into processes.
• Strengthen cloud and container security with access controls, configurations, monitoring, and standards.
• Review findings, assess risks, and coordinate remediation with technical teams.
• Support DevSecOps standards, guardrails, documentation, and procedures.
• Promote continuous improvement of security automation and DevSecOps capabilities.

Skills

CI/CD

Infrastructure-as-code

Cloud platforms

Container technologies

Scripting/Automation

Security testing

Vulnerability management

Cross-functional collaboration

Education

Bachelor’s degree in Computer Science

Tools

AWS

Azure

GCP

SAST

DAST

SCA

Job description

Job Information

Computer

Salary Range S$8,000-S$8,700

Job Description

• Integrate security controls and best practices throughout the software development and deployment lifecycle.
  
• Develop and improve CI/CD pipelines to support secure, efficient, and reliable application releases.
  
• Automate infrastructure provisioning, configuration, and security processes using infrastructure-as-code and scripting tools.
  
• Evaluate vulnerabilities across applications, cloud environments, containers, and infrastructure, and recommend appropriate remediation measures.
  
• Implement and manage application security tools such as SAST, DAST, SCA, secrets management, and vulnerability scanning solutions.
  
• Collaborate with development, security, cloud, and operations teams to embed security into engineering processes and workflows.
  
• Strengthen cloud and container security by applying appropriate access controls, configurations, monitoring, and security standards.
  
• Review security findings, assess associated risks, and coordinate remediation activities with relevant technical teams.
  
• Support the development of DevSecOps standards, security guardrails, technical documentation, and operational procedures.
  
• Promote continuous improvement of security automation, engineering practices, and DevSecOps capabilities across technology environments.
  

Requirements

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Engineering, or a related discipline.
  
• 3–5 years of relevant experience in DevOps, DevSecOps, cloud engineering, application security, cybersecurity, or a related technical field.
  
• Strong knowledge of CI/CD, infrastructure-as-code, version control, scripting or automation, container technologies, and cloud platforms such as AWS, Azure, or GCP.
  
• Practical understanding of application and infrastructure security, including vulnerability management, secure coding practices, security testing, access controls, and cloud security principles.
  
• Strong analytical, problem-solving, communication, and stakeholder management skills, with the ability to work effectively across development, security, and operations teams.