DevSecOps Engineer: Cloud Security & CI/CD Automation

Helius Technologies Pte Ltd; Singapore; On-site; SGD 90,000 - 150,000; Full time

Job summary

Helius Technologies Pte Ltd is seeking a DevSecOps Engineer to integrate security into the SDLC and CI/CD pipelines, automating controls and managing vulnerabilities. The role emphasizes securing cloud infrastructure and application security without slowing development.

You will automate security testing (SAST/DAST/SCA), harden AWS/Azure/GCP environments, and enforce runtimes and policies for containers and Kubernetes, aligning with OWASP Top 10, CIS, and NIST.

Qualifications

• Experience in DevSecOps or security-focused DevOps within SDLC/CI-CD.
• Proficient with CI/CD platforms and security tooling as listed.
• Hands-on scripting in Python/Bash/Go for automation.
• Cloud security knowledge across AWS/Azure/GCP and IaC review.

Responsibilities

• Integrate automated security testing into CI/CD pipelines (SAST/DAST/SCA/secret scanning).
• Harden cloud environments and audit IaC for compliance and misconfigurations.
• Analyze vulnerability findings and work with developers to remediate.
• Secure containerized apps and enforce runtime policies in Kubernetes.
• Ensure deployments align with OWASP Top 10, CIS, and NIST.

Skills

CI/CD Security

Cloud Security

Vulnerability Management

Container Security

Python

Bash

Go

AWS

Azure

GCP

Tools

SonarQube

Snyk

Checkmarx

OWASP ZAP

Trivy

Aqua Security

Checkov

Kubernetes

Job description

Helius Technologies Pte Ltd is seeking a DevSecOps Engineer to integrate security into the SDLC and CI/CD pipelines, automating controls and managing vulnerabilities. The role emphasizes securing cloud infrastructure and application security without slowing development.

You will automate security testing (SAST/DAST/SCA), harden AWS/Azure/GCP environments, and enforce runtimes and policies for containers and Kubernetes, aligning with OWASP Top 10, CIS, and NIST.