DevSecOps Engineer - ZB

Responsibilities

We are seeking an experienced DevSecOps Engineer to join our IT Security Operations team. In this role, you will embed security practices into the CI/CD pipeline, ensuring that applications and infrastructure are built and deployed securely. You will collaborate with cross-functional teams to drive the adoption of security best practices, enhance security automation, and protect systems and data against evolving threats.

Responsibilities

• Design, implement, and manage security solutions within DevOps infrastructure to safeguard applications and services.
• Partner with development, operations, and QA teams to integrate security across the software development lifecycle (SDLC).
• Perform secure code reviews and conduct application vulnerability assessments (static and dynamic analysis).
• Configure and manage security tools such as IDPS, WAF, and SIEM platforms.
• Establish, document, and enforce security policies and procedures in alignment with industry standards.
• Enhance container security practices, including image scanning and runtime protection.
• Conduct regular security audits, risk assessments, and define mitigation strategies.
• Manage security incidents, coordinate response activities, and perform post-incident reviews.
• Maintain comprehensive documentation on DevSecOps processes, security controls, and incident response plans.
• Mentor and train team members on security awareness, secure coding, and DevSecOps best practices.
• Collaborate with third-party vendors and partners to ensure compliance with security standards.
• Stay updated on cybersecurity trends, tools, and practices to continuously improve security posture.
  
  
  

Qualifications

Requirements:

• Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field.
• Minimum 5 years of IT security experience, with at least 2 years in DevSecOps.
• Strong knowledge of encryption technologies, IAM, and network security protocols.
• Experience with Infrastructure as Code (IaC) and automation tools such as Terraform, Ansible, or Chef.
• Familiarity with application security tools (e.g., Fortify, Checkmarx, SonarQube).
• Hands-on experience with containerization and cloud environments.
• Security certifications such as CISSP, OSCP, GWAPT, or CCSK are highly desirable.
• Proven ability to conduct root cause analysis and resolve complex security issues.
• Strong problem-solving skills, attention to detail, and ability to perform under pressure.
• Excellent communication skills, with the ability to convey technical security concepts to both technical and non-technical audiences.
  
  
  

Beyondsoft (Malaysia) Sdn. Bhd. is committed to being an equal opportunity employer and provides equal employment opportunities to all employees and applicants. We strive to cultivate a workplace that celebrates diversity and inclusion, where individuals of all backgrounds—regardless of nationality, ethnicity, religion, age, gender identity, sexual orientation, or any other distinguishing trait—can succeed and thrive. We prohibit discrimination and harassment of any type with regard to race, color, religion, age, national origin, disability status, genetics, sexual orientation, gender identity, or expression. This policy applies to all terms and conditions of employment, including recruiting, hiring, and the entire employee lifecycle. We are focused on creating an environment where everyone can reach their full potential.

Employment offers from Beyondsoft (Malaysia) Sdn. Bhd. are contingent upon the successful completion of any required pre-employment processes, in line with applicable laws and regulations. Beyondsoft (Malaysia) Sdn. Bhd. does not ask for any recruitment fees, nor does it request any unauthorized payments from candidates as part of the hiring process