Kerja Sepenuh Masa, Senior Executive, DevSecOps Engineering di Nexroar Services Selangor - Maukerja

Work Experience

• 3+ years of hands-on experience in DevSecOps, application security, cloud security, platform engineering, or secure CI/CD delivery across hybrid environments.
• Demonstrated experience embedding automated security testing and policy checks into build, test, release, and deployment pipelines without creating unnecessary delivery friction.
• Practical experience securing AWS services, identities, networks, containers, serverless workloads, and infrastructure-as-code.
• Experience triaging vulnerabilities, coordinating remediation, managing risk exceptions, and producing evidence for security reviews and audits.
• Exposure to security monitoring, SIEM integration, incident response, detection engineering, and observability within 24x7 operational environments.
• Proven ability to collaborate with developers, security, risk, compliance, infrastructure, and operations teams and to communicate security findings with clear, actionable remediation guidance.

Skills & Competencies

• DevSecOps Automation: Proficiency in Python, Bash, or PowerShell and in automating repeatable security controls and evidence collection.
• Application & Pipeline Security: Strong capability in SAST, DAST, SCA, secrets detection, API testing, security gates, and secure build and release design.
• Cloud-Native Security: Working knowledge of cloud, IAM, containers, serverless, infrastructure-as-code, encryption, and policy-as-code security.
• Risk, Compliance & Governance: Ability to convert regulatory and security requirements into proportionate, traceable, and measurable engineering controls.
• Collaboration & Security Enablement: Skilled in partnering with engineering teams, explaining risk in practical terms, documenting standards, and promoting a security-by-design culture.

Work Location: In person