Project Manager-DevSecops

EXASOFT PTE. LTD.; Singapore; On-site; SGD 120,000 - 180,000; Full time

Job summary

EXASOFT PTE. LTD. is seeking a Technical Project Manager to lead end-to-end DevSecOps and Secure SDLC initiatives, coordinating across Engineering, Architecture, Operations, Procurement, and vendors to deliver secure software.

You will drive scope, timelines, resources, risks, and dependencies, provide dashboards and executive updates, and ensure strong stakeholder alignment in a fast‑paced security‑conscious environment.

Qualifications

• 8+ years of relevant experience, including 3+ years in project management.
• Hands-on with Secure SDLC, DevSecOps and CI/CD tools (GitLab CI, GitHub Actions, Jenkins).
• Proficient with Docker, Kubernetes, Terraform/CloudFormation, and OPA.
• Strong knowledge of Application Security, OWASP Top 10, threat modelling and vulnerability management.
• Experience with AWS/Azure security services (Security Hub, GuardDuty, CloudTrail, Sentinel).
• Familiar with CSPM, SBOM, SLSA and supply-chain security.
• Excellent stakeholder management, leadership, and PM skills.
• Financial Services/Asset Management experience preferred.
• PMP, Cybersecurity, DevSecOps, AWS or Cloud certifications advantageous.

Responsibilities

• Manage end-to-end Secure SDLC and DevSecOps projects.
• Define scope, deliverables, timelines, resources, risks and dependencies.
• Coordinate with Engineering, Architecture, Operations, Procurement and vendors.
• Drive security integration across CI/CD pipelines and workflows.
• Provide project status, dashboards, reports and executive updates.

Skills

DevSecOps

CI/CD

Security Architecture

Stakeholder Management

Project Management

Threat Modelling

Vulnerability Management

Secure SDLC

Cloud Security

Communication Leadership

Education

Degree in Computer Science/IT or related field

Tools

GitLab CI

GitHub Actions

Jenkins

Docker

Kubernetes

Terraform

CloudFormation

OPA

AWS

Azure

Job description

Technical Project Manager - DevSecOps

Role Summary

Lead end-to-end delivery of complex DevSecOps and security initiatives, embedding security across the Secure SDLC while managing cross-functional teams, risks, dependencies, timelines, and budgets.

Key Responsibilities

• Manage end-to-end Secure SDLC and DevSecOps projects.
• Define scope, deliverables, timelines, resources, risks, and dependencies.
• Coordinate with Engineering, Architecture, Operations, Procurement, and vendors.
• Drive security integration across CI/CD pipelines and development workflows.
• Provide project status, dashboards, reports, and executive updates.

Must-Have Requirements

• Degree in Computer Science, IT, or related field.
• 8+ years of relevant experience, including 3+ years in project management.
• Experience in Secure SDLC, DevSecOps, and CI/CD tools such as GitLab CI, GitHub Actions, or Jenkins.
• Hands-on knowledge of Docker, Kubernetes, Terraform/CloudFormation, and Policy-as-Code (OPA) .
• Strong understanding of Application Security, OWASP Top 10, threat modelling, vulnerability management, and secure design .
• Experience with AWS/Azure cloud security and services such as Security Hub, GuardDuty, CloudTrail, or Microsoft Sentinel.
• Knowledge of CSPM, SBOM, SLSA, and supply-chain security .
• Strong stakeholder management, communication, leadership, and project management skills.
• Financial Services/Asset Management experience is preferred.
• PMP, Cybersecurity, DevSecOps, AWS, or Cloud certifications are advantageous.