3 days ago
Singapore (city not specified)Senior
Responsibilities
- Assess the delivery landscape and implement the DevSecOps control framework, ownership model, and exception process.
- Create risk-based security gates, vulnerability triage and remediation workflows, service levels, exception handling, and supporting evidence.
- Design and maintain reusable GitLab CI/CD templates and secure golden pipelines with protected branches, approvals, controlled runners, trusted components, and secure deployment patterns.
- Integrate and tune SAST, SCA, secret detection, infrastructure-as-code scanning, container-image scanning, and applicable DAST controls.
- Establish software supply-chain governance covering SBOMs, artifact retention, image provenance, trusted base images, Nexus, and internal registries.
- Secure Terraform and Ansible workflows through module review, policy checks, secret handling, and environment promotion controls.
- Integrate HashiCorp Vault, workload identities, tokens, and least-privilege service access into delivery workflows.
- Coach development and platform teams, support Security Champion activities, publish practical standards, and guide pilot-team adoption.
- Produce coverage, failure, remediation, and exception KPIs for management, risk, audit, and regulatory reviews.
- Support incident analysis and recurring control-failure resolution, automate repetitive checks, and transfer mature capabilities into the operational run model.
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, or equivalent.
- At least 8 years of delivery and hands-on security experience.
- Experience engineering GitLab CI/CD pipelines and reusable components.
- Practical experience implementing SAST, SCA, secret, infrastructure-as-code, and container scanning.
- Experience with Terraform and scripting in Python, Bash, or PowerShell.
- Experience with vulnerability triage, remediation workflows, risk-based security gates, artifact repositories, container registries, and dependency governance.
- Solid application-security fundamentals and the ability to design controls developers can adopt without bypassing.
- Proven hands-on architect-builder experience taking incomplete requirements through security design, implementation, evidence, documentation, and operational handover.
- Experience supporting deployment and production operations, including availability, recoverability, change control, audit evidence, operational ownership, and supportability.
- Autonomous, tenacious, rigorous, and able to organize multiple concurrent issues.
About Azqore SA
Azqore SA provides outsourced core banking platforms and back-office processing for private banks and wealth managers, centered on its S2i integrated information system. It delivers IT and BPO services, including digital banking products and operations processing, from hubs in Switzerland, Portugal, and Singapore. Founded in 2018 and headquartered in Lausanne, it is a subsidiary of Indosuez Wealth Management (Crédit Agricole Group) and supports 20+ client banks with over CHF 200 billion in assets across 10 countries.