- Singapore Central Region (Singapore) Singapore
Kerja Sepenuh Masa DevSecOps Engineer - 1659, Gaji tinggi SGD 8,997 di JOBSTER PRIVATE LTD. Central Region (Singapore) - Maukerja
Kongsi
Simpan
Lokasi Kerja
Penerangan Kerja
Tanggungjawab
Responsibilities
Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS, including runners, branching/merge controls and access management.
Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement appropriate security and quality gates.
Apply shift-left security practices across the SDLC, covering code, dependencies, containers and application deployments.
Automate application build, testing, security scanning and deployment across development and production environments.
Support containerised application deployment using Docker and Kubernetes/EKS.
Manage pipeline credentials, secrets and service accounts securely.
Develop reusable pipeline templates and standardise DevSecOps practices across AE applications.
Troubleshoot pipeline, security scanning and deployment issues and support developers in resolving identified findings.
Experience and Skills Needed
Degree or Diploma in Computer Science, Information Technology, Software/Computer Engineering or related discipline.
Hands-on experience with Lab CI/CD, including pipeline configuration
Good understanding of SDLC, DevSecOps and shift-left security, including SAST, DAST, Software Composition Analysis (SCA) and security gates.
Experience integrating application security and code-quality tools, preferably Fortify, Nexus IQ and SonarQube, into CI/CD pipelines.
Experience with Docker and Kubernetes, with working knowledge of AWS/EKS environments.
Scripting experience using Python, Bash, PowerShell or equivalent.
Working knowledge of Linux, networking, access control and secrets management.
Strong troubleshooting skills across CI/CD, security tooling and application deployment.
Design, implement and maintain secure CI/CD pipelines using GitLab and SHIP-HATS, including runners, branching/merge controls and access management.
Integrate Fortify, Nexus IQ and SonarQube into CI/CD pipelines and implement appropriate security and quality gates.
Apply shift-left security practices across the SDLC, covering code, dependencies, containers and application deployments.
Automate application build, testing, security scanning and deployment across development and production environments.
Support containerised application deployment using Docker and Kubernetes/EKS.
Manage pipeline credentials, secrets and service accounts securely.
Develop reusable pipeline templates and standardise DevSecOps practices across AE applications.
Troubleshoot pipeline, security scanning and deployment issues and support developers in resolving identified findings.
Experience and Skills Needed
Degree or Diploma in Computer Science, Information Technology, Software/Computer Engineering or related discipline.
Hands-on experience with Lab CI/CD, including pipeline configuration
Good understanding of SDLC, DevSecOps and shift-left security, including SAST, DAST, Software Composition Analysis (SCA) and security gates.
Experience integrating application security and code-quality tools, preferably Fortify, Nexus IQ and SonarQube, into CI/CD pipelines.
Experience with Docker and Kubernetes, with working knowledge of AWS/EKS environments.
Scripting experience using Python, Bash, PowerShell or equivalent.
Working knowledge of Linux, networking, access control and secrets management.
Strong troubleshooting skills across CI/CD, security tooling and application deployment.
Peringatan Penting
Jangan pernah kongsikan maklumat bank atau kad kredit anda semasa memohon pekerjaan. Elakkan membuat sebarang pembayaran atau mengisi survey yang tidak berkaitan. Jika ada yang mencurigakan, sila laporkan iklan pekerjaan ini segera.
Lebih Lanjut