Senior DevSecOps Security & Governance Engineer

Role Overview

We are seeking a Senior DevSecOps Security &Governance Engineer to establish and implement secure software development practices across APAC.

The role will focus on application security automation, security governance, compliance monitoring, and alignment with global security standards.

Key Responsibilities

• Define and implement DevSecOps security standards and best practices.
• Integrate SAST, DAST, and software composition analysis into CI/CD pipelines.
• Implement automated security controls using GitHub Advanced Security and other security tools.
• Establish security gates, vulnerability management, and exception-handling processes.
• Develop security compliance monitoring and reporting mechanisms.
• Support APAC application teams in adopting secure development practices.
• Provide security guidance and mentoring to engineering teams.

Required Skills & Experience

• 5+ years of relevant experience in Application Security, DevSecOps, or Security Engineering.
• Strong knowledge of OWASP Top 10 and Secure SDLC.
• Hands-on experience with SAST, DAST, and security automation tools.
• Experience with GitHub Advanced Security, CodeQL, or OWASP ZAP.
• Understanding of CI/CD pipelines and cloud security.
• Experience implementing security policies and governance processes.

Preferred Qualifications

• Experience with enterprise security governance frameworks.
• Experience supporting regional or global DevSecOps initiatives.