Devsecops Engineer

🔒 DevSecOps Engineer — GovTech Not "DevOps who runs Trivy sometimes." Not "security who knows kubectl." We need someone who builds secure infrastructure in regulated environments and knows the difference. The work : - Secure CI/CD at scale — SAST/DAST/SCA integrated, not bolted-on - K8s hardening, IaC security, secrets management — on government cloud - Compliance that ships: IM8, CIS — met without killing velocity - Incident response that starts with pipeline logs - The stack: K8s, Terraform, GitHub Actions/GitLab CI, Vault, Trivy, OPA, AWS/Azure Gov Who this is for : You've worked government/finance/defense. You've had the "compliance says no" fight — and won by automating the yes. You write policy-as-code. You explain security to developers effectively Not this: - SOC analyst with a rebranded title - Security team that says "no," engineering finds workarounds - Six-month wait for a firewall rule Details : GovTech Singapore | Hybrid | Immediate 5+ years platform/SRE/security, regulated env preferred Singapore citizenship, permanent resident, LTVP LOC required Send me your CV now. High priority search.