Your browser does not support javascript! Please enable it, otherwise web will not work for you.

DevSecOps Engineer

Home > Python programming jobs

DevSecOps Engineer in Others new

  • Ho Chi Minh City, Vietnam

Responsibilities

  • Integrate secret scanning, SAST, SCA/SBOM, container, IaC, and DAST checks into pull request, build, and release workflows.
  • Implement risk-based CI/CD security gates, false-positive handling, and documented exceptions.
  • Build scripts and API integrations for scan aggregation, ticketing, evidence collection, and security reporting.
  • Track scan coverage, gate decisions, vulnerability trends, and control adoption.
  • Partner with AppSec, Product Engineering, Platform/SRE, and Security Operations and enable Product Security, Security Champions, and SRE teams.
  • Use AI tools responsibly for analysis, scripting, and documentation while verifying generated outputs.

Requirements

  • Bachelor’s degree in Computer Science, Engineering, or Cybersecurity, or equivalent practical experience.
  • At least 3 years of experience in DevSecOps, DevOps/platform engineering, AppSec, or software engineering with security automation.
  • Hands-on experience with Git and CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, or Azure DevOps.
  • Ability to automate workflows using Python, Bash, or similar languages and work with APIs.
  • Experience with security scanning, finding triage, and vulnerability remediation.
  • Working knowledge of Secure SDLC, Linux, containers, cloud fundamentals, and OWASP Top 10.
  • Strong developer collaboration skills and effective use of AI assistants with appropriate review of generated outputs.
  • Preferred experience with Kubernetes, Terraform, AWS, Azure, and container build/release workflows.
  • Preferred exposure to CodeQL, Semgrep, SonarQube, Snyk, Trivy, Gitleaks, Checkov, or ZAP.
  • Preferred knowledge of SBOM, software supply-chain security, signing/attestation, OWASP SAMM, or NIST SSDF.
  • Experience with AI-assisted SDLC, AI coding assistants, AI-driven security reviews, or remediation automation is a plus.

OPSWAT

OPSWAT protects critical infrastructure. Our goal is to eliminate malware and zero-day attacks. We believe that every file and every device pose a threat. Threats must be addressed at all locations at all times—at entry, at exit, and at rest. Our products focus on threat prevention and process cr...

Similar positions

Staff Software Engineer, Backend (Observability)

  • Affirm
  • Full time
  • Canada
  • 10/31/2026
  • Salary: $181k - $241k/yr
  • Remote

Staff Software Engineer, Sensing Systems

  • CHAOS Industries
  • Full time
  • USA
  • 10/31/2026
  • Salary: $211k - $290k/yr
  • El Segundo, CA

Machine Learning Engineer, Perception

  • Path Robotics
  • Full time
  • USA
  • 10/31/2026
  • Remote

Research Engineer / Scientist, Reinforcement Learn

  • Harvey
  • Full time
  • UK
  • 10/31/2026
  • Salary: $230k - $340k/yr
  • London

Software Engineer (DS Team)

  • At-Bay
  • Full time
  • Others
  • 10/31/2026
  • Tel Aviv-Yafo, Israel