DevSecOps Engineer

Overview

The DevSecOps Engineer role entails a hands-on security engineering position focused on integrating security throughout the design, build, and operation of vital financial market systems at SGX. You will be embedded within the Market Engineering team, designing secure delivery pipelines, automating security measures, and enabling engineering teams to deploy resilient and compliant software swiftly. This role involves creating platforms, codifying security guardrails, and shaping engineering approaches on a broad scale.

Key Responsibilities

• Define and standardize enterprise CI/CD pipeline and automation practices.
• Establish infrastructure as code (IaC) standards along with platform automation capabilities.
• Develop and enforce DevSecOps standards and security automation frameworks.
• Drive developer experience initiatives and support engineering team enablement.
• Lead platform engineering methodologies and capabilities enhancement.
• Manage environment strategy and promote engineering self-service adoption.
• Set standards and governance for engineering tooling.
• Lead automation of enterprise workflows.
• Define and implement compliance automation, including policy as code.
• Guide DevOps capability building and standardization across multiple teams.
• Innovate agentic AI platform services to reduce engineering toil, enhance developer experience, automate compliance evidence, and integrate agents across CI/CD, cloud, security, and observability workflows.
• Take ownership of high-impact projects or workstreams with accountability for delivery milestones, risk management, dependencies, and senior management communication.
• Offer senior-level security architecture consultation, threat modeling, and secure design advice for new products, platforms, and significant tech changes.

Qualifications and Experience

• Approximately 5 to 10 years’ experience in DevSecOps, security engineering, platform engineering, or technology leadership within complex, high-availability environments. Background in financial services or regulated industries is highly valued.
• Proven leadership in managing projects, workstreams, or engineering teams with strong ownership over outcomes, risk handling, stakeholder engagement, and delivery quality that registers at senior management levels.
• Extensive hands-on experience with secure SDLC, CI/CD, static and dynamic application security testing (SAST/DAST), software composition analysis (SCA), container security, secrets management, compliance-as-code, and policy-as-code.
• Practical skills with tools and platforms including Jenkins, GitLab CI/CD, Terraform, Docker, Kubernetes, AWS, Azure, GCP, Python, Bash or PowerShell, and observability tools like ELK, Datadog, and Coralogix.
• Sound knowledge of IAM, encryption, secure configurations, vulnerability management, incident response, and adherence to security standards such as OWASP, NIST, and CIS Benchmarks.
• Excellent communication, influence, and stakeholder management capabilities, with confidence to critically guide teams toward effective, secure, pragmatic, and sustainable solutions.
• Degree in Computer Science, Engineering, Information Security or related fields. Relevant certifications in cloud, DevOps, security or architecture are advantageous.