DevSecOps Engineer

Job description

​We are working with a leading firm in Asia with global network. As part of their continued growth, Charterhouse has been engaged to search for a Network DevSecOps Engineer.

The DevSecOps Engineer plays a crucial role in enhancing the security posture of our software development and deployment processes. This role involves collaborating with development, operations, and security teams to implement security best practices, automate security testing, and ensure the delivery of secure and high-quality software products. The ideal candidate is a skilled technologist with a deep understanding of both software development and security principles.

Responsibilities:

• Collaborate with cross-functional teams to integrate security into all stages of the software development lifecycle.

• Design, develop, and maintain security automation and tooling to support continuous security testing and monitoring.

• Implement security controls, best practices, and standards in infrastructure, applications, and deployment pipelines.

• Conduct security assessments, vulnerability scans, and penetration testing to identify and address security weaknesses.

• Monitor and respond to security incidents, including investigating and mitigating security breaches.

• Perform code reviews to identify security vulnerabilities and provide guidance to developers on secure coding practices.

• Configure and manage security-related tools and technologies such as vulnerability scanners, intrusion detection systems, and security information and event management (SIEM) systems.

• Collaborate with development teams to ensure secure application design, architecture, and deployment strategies.

• Implement, maintain and built upon DevSecOps tools eg. Jenkins, Github, Terraform, Hashicorp Vault.

Qualifications:

• Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent experience).

• Proven experience in software development, scripting, or automation, preferably in languages such as Python, Javascript, or Golang

• Knowledge of cloud security concepts and practices in popular cloud platforms (e.g., AWS, Azure, Google Cloud).

• Excellent communication and teamwork skills, with the ability to collaborate effectively across different teams and departments.

• Relevant industry certifications (e.g., Certified DevSecOps Professional, Certified Cloud Security Professional, Certified Information Systems Security Professional) are a plus.

To qualify, individuals must possess:

• Bachelor’s Degree

• Min. 5 years of relevant experience

• MUST HAVE:

1. Able to develop simple programs in Python, Javascript or Golang

2. Experience working with cloud infrastructure and services such as Microsoft Azure and AWS

3. Experience with security hardening based on best practices e.g. CIS to secure cloud infrastructure and services

Interested applicants, please contact Shan at YushanW@charterhouse.com.sg or +65 6950 0365 for a confidential discussion.

EA License no.: 16S8066 I Reg no.: R1980894

Only successful candidates will be notified.