DevSecOps Engineer

Key Responsibilities:

CI/CD Pipeline Management: Develop and maintain CI/CD pipelines using SHIP-HATS tools ecosystem Configure GitLab for version control and automated deployment workflows Implement code quality gates using SonarQube for static code analysis Manage security scanning using Fortify on Demand (FOD) for vulnerability assessment Oversee dependency scanning and management using Nexus IQ Coordinate with CloudSCAPE for security compliance scanning and remediation Security and Compliance: Implement and maintain Automated Baseline Log Review (ABLR) systems Coordinate with GovTech Cyber Security Operations Centre (GCSOC) for security monitoring Manage Central Accounts Management (CAM) integration for user access control Coordinate and resolve Vulnerability Assessment and Penetration Testing (VAPT) findings. Ensure compliance with Personal Data Protection Impact Assessment (PDPIA) requirements Implement and maintain Vulnerability Management System (VMS) Platform Operations: