DevSecOps Engineer

About the role

We are looking for a DevSecOps Engineer to embed security throughout the software development lifecycle in our banking environment. You will work closely with development, operations and security teams to ensure that security is integrated into CI/CD pipelines, containerised applications and infrastructure as code.

Key responsibilities

• Implement and maintain a Secure SDLC program using tools such as GitLab, SonarQube and JFrog.
• Design, build and operate highly available CI/CD pipelines with Jenkins and Kubernetes, applying container‑security best practices.
• Collaborate with developers to identify, triage and remediate vulnerabilities, code smells and bugs using SonarQube, SAST, DAST and SCA tools.
• Guide teams on secure coding standards, branching strategies and secure configuration management.
• Draft and update security procedures, guidelines and remediation plans in line with organisational policies.
• Coordinate with internal and external vendors to deliver secure solutions efficiently.

Required profile

• Bachelor’s degree in Computer Science, Information Technology or a related field.
• Minimum three years of experience in operations, development, security or a related discipline.
• Relevant certifications such as CySA+, OSWA or equivalent are a plus.
• Strong analytical and problem‑solving abilities with the capacity to work under pressure.
• Fluent communication skills in both Khmer and English.

Required skills

• GitLab, SonarQube, JFrog, Jenkins, Kubernetes, Docker, Ansible.
• Microservices architecture, CI/CD pipeline design, Infrastructure as Code.
• Scripting with YAML, Bash and Python.
• Experience with SAST, DAST, SCA tools and familiarity with OWASP Top 10 and CWE Top 25.