DevSecOps Engineer

🔒 DevSecOps Engineer — GovTech

Not "DevOps who runs Trivy sometimes." Not "security who knows kubectl." We need someone who builds secure infrastructure in regulated environments and knows the difference.

The work:

- Secure CI/CD at scale — SAST/DAST/SCA integrated, not bolted-on

- K8s hardening, IaC security, secrets management — on government cloud

- Compliance that ships: IM8, CIS — met without killing velocity

- Incident response that starts with pipeline logs

- The stack: K8s, Terraform, GitHub Actions/GitLab CI, Vault, Trivy, OPA, AWS/Azure Gov

Who this is for:

You've worked government/finance/defense. You've had the "compliance says no" fight — and won by automating the yes. You write policy-as-code. You explain security to developers effectively

Not this:

- SOC analyst with a rebranded title

- Security team that says "no," engineering finds workarounds

- Six-month wait for a firewall rule

Details:

• GovTech Singapore | Hybrid | Immediate

• 5+ years platform/SRE/security, regulated env preferred

• Singapore citizenship, permanent resident, LTVP LOC required

Send me your CV now. High priority search.