Hybrid DevSecOps Engineer

at FINNOMENA

• Job title: DevSecOps Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Cloud, Docker, Jenkins, Kubernetes
• Location requirements: Hybrid, Bangkok, Thailand

About the role

• DevSecOps Engineer automating security testing and collaborating with developers on secure code. Championing a culture of security excellence within the organization while fostering awareness and training initiatives.

Responsibilities

• Design, implement, and automate DevSecOps processes and tools within our CI/CD pipeline.
• Conduct penetration testing on applications, infrastructure, and APIs, identifying and documenting vulnerabilities.
• Collaborate with developers to understand their needs and integrate security best practices into the development process.
• Analyze security vulnerabilities, prioritize risks, and recommend mitigation strategies.
• Develop and maintain security documentation, including threat models and attack surface diagrams.
• Stay informed about the latest security trends and threats, keeping our team and organization proactive against evolving risks.
• Participate in security incident response and remediation efforts.
• Foster a culture of security awareness within the organization through education and training initiatives.

Requirements

• Proven experience with penetration testing methodologies and tools (e.g., Metasploit, Burp Suite, Nmap, Zap, etc).
• 3+ years of experience as a DevSecOps Engineer or a related role.
• Strong understanding of DevSecOps principles and practices.
• Experience with CI/CD pipelines and automation tools (e.g., Jenkins, GitLab CI).
• Experience in Kubernetes (GKE, KUBECTL, HELM) and containers (Docker).
• Expertise in secure coding practices and application security frameworks.
• Good communication, collaboration, and problem-solving skills.
• Ability to work independently and as part of a cross-functional team.
• Bonus Points: Certification in penetration testing (e.g., OSCP, CEH, GPEN, Pentest+).
• Experience with Google Cloud platforms.

Benefits

• The opportunity to work on cutting-edge technology and make a real impact on our organization's security posture.
• A collaborative and supportive work environment with a strong focus on learning and development.
• Hybrid working environment.
• Competitive compensation and benefits package.
• The chance to be part of a team that is passionate about security and innovation.