- Singapore, Singapore
- Senior
- 8+ years
In charge of design, build and industrialise security controls across the software development lifecycle and CI/CD supply chain, creating secure-by-default delivery patterns and integrating automated controls into GitLab pipelines.
Responsibilities
- Contribute to and implement the agreed DevSecOps control framework, ownership model and exception process across IWM / Azqore
- Create ownership, SLAs, triage, remediation, exception expiry and evidence workflows for risk-based security gates and vulnerability management
- Design and maintain reusable GitLab CI/CD templates and golden pipelines
- Integrate and tune SAST, SCA, secret detection, IaC scanning, container-image scanning and, where applicable, DAST
- Establish artefact governance, SBOM generation and retention, image provenance, trusted base images and lifecycle controls for Nexus and internal registries
Requirements
- Bachelor Degree in Cybersecurity
- Bachelor Degree in Computer Science