DevSecOps Specialist

Maya Mandaluyong, National Capital Region, Philippines Overview The DevSecOps Specialist plays a key role in embedding security across the software development lifecycle. With a deep understanding of application security and secure development practices, this role focuses on automating and scaling security across CI/CD pipelines, helping engineering teams build secure software without sacrificing speed. Working closely with product, tech and operations teams, the DevSecOps Specialist simplifies security adoption. Automating compliance, reducing risks and making security a seamless part of the DevOps process. The goal is to protect applications while keeping development fast and efficient. What you will do Own the integration and continuous improvement of AppSec tools (SAST, SCA, DAST) in CI/CD workflows. Lead security reviews for high-impact features and services. Design and maintain security-as-code pipelines and controls at the application layer. Conduct deep-dive threat modeling for product features, APIs and services. Drive adoption of secure coding practices and provide security guidance to engineers during design and implementation. Automate detection and remediation of application-level vulnerabilities. Support the Office of the CISO in executing security strategies and initiatives. What we are looking for 3–5 years in AppSec, DevSecOps, or related SDLC security engineering roles. Strong experience with CI/CD integration for SAST, SCA, and DAST tools. Knowledge of modern web app and API security risks (e.g. OWASP Top10). Seniority level Mid-Senior level Employment type Full-time Job function Engineering, Analyst, and Information Technology Industries Financial Services, Banking, and IT Services and IT Consulting #J-18808-Ljbffr