Job Description

THE ROLE

As a DevSecOps Lead in our team, you\'ll be working to automate and accelerate the testing, release, and deployment of applications into our cloud environments quickly and securely. You will be responsible for enhancing the security of our applications and infrastructure while maintaining efficient and reliable continuous delivery processes. You will provide continuous delivery solutions in a cloud environment and have experience with the core suite of tools used to manage our cloud environment and SaaS product. You will employ industry continuous delivery and security patterns and collaboratively work with other members to achieve successful continuous delivery solutions with a strong focus on security.

Relationships

You will be reporting to the Chief Information Officer (CIO). You\'ll also collaborate with fellow team members as needed.

Responsibilities

You will be responsible for the following efforts at Accredify:

• DevSecOps Strategy: Develop and implement a comprehensive DevSecOps strategy that integrates security practices into the entire software development lifecycle.
• Team Leadership: Lead and mentor a team of DevSecOps engineers, providing guidance, support, and fostering a culture of security awareness.
• Security Assessments: Conduct regular security assessments, vulnerability scans, and penetration testing to identify and address security weaknesses in applications and infrastructure.
• Secure Development Pipeline: Design, implement, and maintain secure development pipelines, including automated testing, code scanning, and security controls, to ensure the delivery of secure software.
• Threat Modeling: Collaborate with development teams to perform threat modeling and identify potential security risks in new and existing applications.
• Security Tools and Technologies: Stay current with the latest security tools and technologies, and ensure their integration into the DevSecOps process.
• Incident Response: Develop and maintain an incident response plan for security breaches, ensuring a swift and coordinated response.
• Compliance: Ensure compliance with relevant security standards and regulations, such as PDPA, ISO27001, or industry-specific requirements.
• Collaboration: Work closely with cross-functional teams, including developers, IT operations, and IT security, to align on security objectives and integrate security best practices.
• Documentation: Maintain clear and detailed documentation of security policies, procedures, and best practices.
• Provide excellent communication skills, reporting directly to the CIO.

Technical Skills

• Proven experience spanning at least two IT disciplines, including technical architecture, application development, or operations for at least 5 years
• Knowledge of business process re-engineering principles and processes
• Strong understanding of application development methodologies
• Adept at evaluating problems accurately and displaying sound judgement
• Familiarity with a broad portfolio of AWS infrastructure tools (EBS, S3, EC2, Elastic IP, Route 53, VPC) and experience with cloud infrastructure management and automation technologies
• Experience in GCC (AWS) and SHIP/HATS
• Experience in continuous integration tools
• Experience optimising applications, both stand-alone and in distributed systems to maximize performance
• Experience maintaining an infrastructure and ensuring stability while adding new features
• Ability to clearly articulate design and implementation choices
• Comfort with frequent, incremental code testing and deployment
• Possess a strong grasp of automation tools
• Comfort with collaboration, open communication and reaching across functional borders

Education

You would ideally have a bachelor\'s degree in computer science, systems analysis or a related study, or equivalent experience.

You would also ideally have

• Team lead experience

What we look for

We strive to hire the best - not just highly skilled, but also people who are a great culture fit. Across the company, we aim to look for people who possess the following traits:

• Self-starter with a passion for building high-quality web applications
• Prefer experience with public-facing web application development
• Meticulousness

• Attention to all details and documentation
• Eye for detail and quality perspective on processes, workflows, and procedures
• Open-minded and creative

• Must have a passion for learning and display critical thinking
• Good people & communication skills

• Willingness to present and explain your ideas to other key stakeholders including colleagues
• Driven & motivated

• Ability to find your own value proposition, create and manage own tasks
• Good problem-solving capabilities

• Self-starter who seeks innovative solutions but is not shy to ask for advice if necessary
• Ability to think critically and effectively
• Good time management and priority-setting skills

• Ability to manage multiple projects at the same time

BENEFITS

• Paid short courses/certificates for additional learning & upskilling (subjected to availability)
• Unlimited Annual Leave, with a minimum of 14 days
• Medical Insurance
• Potential ESOP (Employee Stock Ownership Plan)
• Flexible hours
• Flexible Work-from-Home arrangement

NOTICE

We regret to inform that only shortlisted candidates will be notified. All applications will be treated with the strictest confidence.

By submitting any application or resume to us, you will be deemed to have read and agreed to the terms of our Data Protection Notice ( and consented to us collecting, using, retaining and disclosing your personal information to prospective employers for their consideration.

Consequences of Not Providing Personal Data for Transaction/Service/Application

Please be noted that should you not consent and provide use with the relevant personal data to fulfil the \xe2\x80\x9cPurposes\xe2\x80\x9d of collection, use and disclosure of your personal data by Accredify, it may hinder our ability to continue to interact with you. We may not be able to make a decision on your recruitment and employment or comply with the law and therefore, we may not be able to make an offer of employment

You may refer and access our website at for more information.

Accredify