DevSecOps Specialist: Secure CI/CD & Risk Insights

OCBC Bank; Singapore; On-site; SGD 120,000 - 180,000; Full time

Benefits offered by this job

Competitive base salary

Holistic benefits package

Learning & development opportunities

Job summary

OCBC Bank is seeking a Cyber Engineering - Risk professional to safeguard systems and networks, collaborating with DevOps to identify and mitigate cyber threats. You will develop security strategies, train developers, and design automated checks within CI/CD.

Required are 5+ years in cyber security, knowledge of SAST/DAST/IAST, and strong communication skills. Familiarity with MAS TRMG and PCI-DSS is preferred. Banking experience in Singapore is highly valued.

Qualifications

• Minimum 5 years of cyber security experience.
• Familiarity with MAS TRMG, PCI-DSS and other regulatory requirements.
• Certifications such as GWAPT, OSCP, CISSP are preferred.
• Experience with DevSecOps for banks in Singapore is highly preferred.
• Able to communicate effectively with various stakeholders.

Responsibilities

• Evaluate threat, vulnerability, impact, and risk from security issues across DevSecOps tools.
• Advise DevOps teams on security issues and remediation strategies.
• Develop and implement DevSecOps metrics, policies, and processes.
• Provide training on tool usage to developers and stakeholders.
• Assist with automating security checks in CI/CD pipelines.
• Review and triage vulnerabilities detected by tools.
• Liaise with vendors and manage incidents related to security tools.
• Stay current on industry trends and advocate security improvements.

Skills

Threat analysis

Security risk assessment

DevSecOps

SAST SCA IAST DAST

Container security

CI/CD pipelines

Scripting (Python/Bash/JavaScript)

Communication skills

Analytical thinking

Regulatory familiarity (MAS TRMG, PCI‑

Education

Bachelor’s degree in CS/Engineering/IT

Tools

SAST tools

SCA tools

DAST/IAST tools

CI/CD tooling

Container scanning (Docker)

Job description

OCBC Bank is seeking a Cyber Engineering - Risk professional to safeguard systems and networks, collaborating with DevOps to identify and mitigate cyber threats. You will develop security strategies, train developers, and design automated checks within CI/CD.

Required are 5+ years in cyber security, knowledge of SAST/DAST/IAST, and strong communication skills. Familiarity with MAS TRMG and PCI-DSS is preferred. Banking experience in Singapore is highly valued.