DevSecOps Engineer: Vulnerability & Cloud Security

Singtel; Singapore; On-site; Confidential; Full time

Job summary

Singtel is building an AI-first telco for the future, delivering secure digital services and resilient cloud platforms. We seek a Cybersecurity Governance & Vulnerability Management professional to drive remediation, governance, and automation across Singtel’s IT landscape.

You will coordinate vulnerability management, IAM governance, and security controls across AWS/Azure, with a focus on risk reduction and AI-driven security operations.

Qualifications

• Bachelor’s Degree in Computer Science, Cyber Security, Computer Engineering, or a related discipline.
• Minimum 5 years of experience in SecOps, Cybersecurity, Information Security, DevSecOps, or related roles.
• Strong experience in security governance, cyber resilience, risk management, and security control implementation.
• Experience managing Vulnerability Assessment & Management, including remediation tracking, risk prioritization, validation, and closure.
• Experience coordinating Penetration Testing, findings remediation, re-testing, and security deviations/exceptions.
• Good understanding of Identity & Access Management (IDAM/IAM), User Access Reviews (UAR), privileged/non-privileged access, RBAC, and access governance.
• Knowledge of Cloud Security across AWS/Azure, including CSPM, CWPP, cloud asset discovery, and workload security.
• Understanding of security across servers, middleware, databases, network devices, and cloud assets, including security architecture and design assessments.
• Exposure to security initiatives such as Micro-segmentation, Network Hardening, DAM, DR governance, and cyber resilience.
• Experience working closely with Information Security teams to understand security requirements, translate them into actionable plans, and drive implementation across application teams.
• Strong project and stakeholder management skills, with the ability to coordinate multiple security initiatives across application and technical teams.
• Proactively identify automation and AI-driven opportunities across security operations and governance to improve efficiency, reduce manual effort, enhance security insights, and strengthen security controls.
• Strong communication, analytical, problem-solving, and follow-up skills, with the ability to drive security actions through to closure.
• Experience in automating security and operational activities using Python, Shell, PowerShell, Ansible, APIs, or other automation tools.
• Exposure to AI/GenAI technologies and AI-assisted security use cases, such as security event analysis, vulnerability prioritization, compliance reporting, and security operations automation.
• Good understanding of DevOps / DevSecOps practices and CI/CD pipelines.
• Understanding of integrating SAST, SCA, vulnerability scanning, secrets scanning, and security quality gates into CI/CD pipelines.
• Exposure to technologies such as Jenkins/Bamboo, Git, Bitbucket, Ansible, Docker, Kubernetes, Linux, and AWS/Azure.
• Experience with security tools such as Tenable, Fortify, SonarQube, Nexus IQ, or equivalent.
• Knowledge of ISO 27001, CIS Controls, or similar security frameworks.
• Relevant security or cloud certifications such as CISSP, CCSP, Security+, AWS/Azure Security, or equivalent would be an advantage

Responsibilities

• Drive cybersecurity risk remediation, security governance and control implementation across Singtel’s IT infrastructure, applications and cloud environments.
• Coordinate vulnerability assessment and management, including remediation tracking, risk prioritization, validation and closure.
• Lead IAM/access governance activities covering privileged and non-privileged access, RBAC and periodic access reviews.
• Work with information security and application teams to translate security requirements into actionable remediation plans.
• Support security controls across applications, servers, middleware, databases, networks and cloud environments (AWS/Azure).
• Identify automation and AI opportunities to improve security operations, vulnerability management, compliance and governance.
• Track security actions, risks, dependencies and milestones, with clear management reporting through to closure.
• Collaborate with stakeholders to drive security initiatives across multiple teams and ensure delivery.

Skills

SecOps

Cybersecurity

Information Security

DevSecOps

Security governance

Risk management

IAM

RBAC

Penetration testing

Vulnerability mgmt

Cloud security

Automation

Python

GenAI in security

DevOps / DevSecOps

CI/CD security

SAST/SCA

Jenkins

Kubernetes

Education

Bachelor’s Degree in Computer Science, Cyber Security, Computer Engineering

Tools

Jenkins

Bamboo

Git

Bitbucket

Ansible

Docker

Kubernetes

Linux

AWS

Azure

Tenable

Fortify

SonarQube

Nexus IQ

Job description

Singtel is building an AI-first telco for the future, delivering secure digital services and resilient cloud platforms. We seek a Cybersecurity Governance & Vulnerability Management professional to drive remediation, governance, and automation across Singtel’s IT landscape.

You will coordinate vulnerability management, IAM governance, and security controls across AWS/Azure, with a focus on risk reduction and AI-driven security operations.