DevSecOps Engineer

Role overview A DevSecOps Engineer will integrate security into software delivery and infrastructure workflows for a Southeast Asian financial services platform. The role works with Platform, Cloud, and Engineering teams to automate controls and support secure delivery across AWS and GCP environments.

Responsibilities - Embed code, dependency, container, infrastructure-as-code, and secrets scanning into CI/CD pipelines. - Maintain security guardrails for builds, releases, artefacts, deployment identities, and infrastructure changes. - Secure containerised workloads, orchestration platforms, and deployment environments across AWS and GCP. - Implement least-privilege access, secrets management, artefact integrity, and secure configuration practices. - Own DevSecOps implementation for SC TRM and BNM RMiT, including evidence collection, remediation, testing, and audit support. - Partner with engineering teams using TypeScript or Node.js, Python, Swift, and Kotlin to integrate security checks into delivery workflows. - Improve monitoring, vulnerability reporting, incident readiness, and secure delivery guidance across the organisation.

Requirements - Degree in Computer Science, Information Security, or a related field, or equivalent experience. - Three or more years in DevOps, platform engineering, cloud security, or DevSecOps. - Experience implementing and owning SC TRM and BNM RMiT controls for technology operations, change management, and secure delivery. - Hands-on experience with GitHub Actions, GitLab CI, Jenkins, or comparable CI/CD systems. - Experience with AWS, GCP, Docker, Kubernetes, infrastructure as code, and cloud security controls. - Knowledge of security scanning, software supply chain security, secrets management, IAM, logging, and monitoring. - Scripting or programming skills in Python, TypeScript or Node.js, Bash, or Go, with the ability to collaborate across teams.

Nice to have - Strong English communication skills are required, as English is the main working language across global teams.