Your browser does not support javascript! Please enable it, otherwise web will not work for you.

DevSecOps Engineer

Home > Python programming jobs

DevSecOps Engineer in Others new

  • Ho Chi Minh City, Vietnam

Responsibilities

  • Integrate secret scanning, SAST, SCA/SBOM, container, IaC, and DAST checks into pull request, build, and release workflows.
  • Implement risk-based CI/CD security gates, false-positive handling, and documented exceptions.
  • Build scripts and API integrations for scan aggregation, ticketing, evidence collection, and security reporting.
  • Track scan coverage, gate decisions, vulnerability trends, and control adoption.
  • Partner with AppSec, Product Engineering, Platform/SRE, and Security Operations and enable Product Security, Security Champions, and SRE teams.
  • Use AI tools responsibly for analysis, scripting, and documentation while verifying generated outputs.

Requirements

  • Bachelor’s degree in Computer Science, Engineering, or Cybersecurity, or equivalent practical experience.
  • At least 3 years of experience in DevSecOps, DevOps/platform engineering, AppSec, or software engineering with security automation.
  • Hands-on experience with Git and CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
  • Ability to automate workflows using Python, Bash, or similar languages and work with APIs.
  • Experience with security scanning, finding triage, and vulnerability remediation.
  • Working knowledge of Secure SDLC, Linux, containers, cloud fundamentals, and OWASP Top 10.
  • Strong developer collaboration skills and effective use of AI assistants with appropriate review of generated outputs.
  • Preferred experience with Kubernetes, Terraform, AWS, Azure, and container build/release workflows.
  • Preferred exposure to CodeQL, Semgrep, SonarQube, Snyk, Trivy, Gitleaks, Checkov, or ZAP.
  • Preferred knowledge of SBOM, software supply-chain security, signing/attestation, OWASP SAMM, or NIST SSDF.
  • Experience with AI-assisted SDLC, AI coding assistants, AI-driven security reviews, or remediation automation is a plus.

OPSWAT

OPSWAT protects critical infrastructure. Our goal is to eliminate malware and zero-day attacks. We believe that every file and every device pose a threat. Threats must be addressed at all locations at all times—at entry, at exit, and at rest. Our products focus on threat prevention and process cr...

Similar positions

Software Engineer

  • Xapo Bank
  • Full time
  • Remote
  • 10/31/2026
  • Anywhere

Staff Software Engineer, Backend (Observability)

  • Affirm
  • Full time
  • Canada
  • 10/31/2026
  • Salary: $181k - $241k/yr
  • Remote

Staff Software Engineer, Sensing Systems

  • CHAOS Industries
  • Full time
  • USA
  • 10/31/2026
  • Salary: $211k - $290k/yr
  • El Segundo, CA

Machine Learning Engineer, Perception

  • Path Robotics
  • Full time
  • USA
  • 10/31/2026
  • Remote

Research Engineer / Scientist, Reinforcement Learn

  • Harvey
  • Full time
  • UK
  • 10/31/2026
  • Salary: $230k - $340k/yr
  • London