{"id":3680455,"url":"https://alion.io/job/ey-senior-devsecops-cebu","title":"Senior DevSecOps - CEBU","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Cebu City, Philippines"],"countries":["PH"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"Bitbucket","optional":false},{"name":"Checkmarx","optional":false},{"name":"CI/CD","optional":false},{"name":"Docker","optional":false},{"name":"Fortify","optional":false},{"name":"GCP","optional":false},{"name":"GitGuardian","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"Invicti","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Excel","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Unix","optional":false},{"name":"Veracode","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-11-03T12:53:04Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-05T05:05:06Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nOverview\nAs part of our Cyber Security team, you will implement and support Secure SDLC (SSDLC) and DevSecOps practices across the software development lifecycle, ensuring security is embedded into design, development, testing, and deployment stages.\nYou will perform hands-on security assessments of applications, APIs, and supporting infrastructure, and work closely with DevOps, Architects, Developers, and QA teams to integrate security into CI/CD pipelines. You will analyze security findings, provide remediation guidance, and contribute to building secure, scalable application delivery practices.\nThe Opportunity\nWe’re looking for a Senior Consultant - DevSecOps / Application Security with strong hands-on expertise in secure SDLC and pipeline security. This role offers the opportunity to work on end-to-end DevSecOps implementations, supporting clients and engineering teams in embedding security across CI/CD pipelines.\nYou will collaborate with cross-functional teams to implement Security as Code (SaC), automation, and cloud-native security controls, while contributing to the adoption of AI-assisted security capabilities and modern application security practices.\nYour Key Responsibilities\nImplement Secure SDLC (SSDLC) practices across application development and CI/CD pipelines.\nPerform application security assessments including SAST, DAST, SCA, and basic threat modeling.\nIntegrate and automate security tools within CI/CD pipelines (e.g., secret scanning, IaC scanning, container security).\nSupport development teams in secure coding practices, vulnerability remediation, and code reviews.\nWork on DevSecOps pipeline implementation and optimization using enterprise and open-source tools.\nAssist in threat modeling exercises (e.g., STRIDE) and secure design reviews.\nDevelop scripts and automation for security testing, reporting, and tool integration.\nCollaborate with DevOps and cloud teams to implement security controls in cloud environments (AWS/Azure/GCP).\nAnalyze security findings and create detailed reports with risks, exploitation scenarios, and remediation steps.\nSupport adoption of container security, IaC security, and compliance-as-code practices.\nContribute to AI-assisted security use cases, such as automated triaging, code analysis, and developer productivity tools.\nStay current with emerging security threats, vulnerabilities, and DevSecOps trends.\nSkills and Attributes for Success\nStrong hands-on experience in application security testing (SAST, DAST, SCA).\nExperience working with CI/CD pipelines and DevOps tools (Jenkins, Azure DevOps, GitHub/GitLab).\nProficiency in scripting/programming (Python, PowerShell, Java, etc.).\nFamiliarity with DAST tools (Burp Suite, WebInspect, AppScan), SAST,SCA tools (Checkmarx, Fortify, Veracode, Coverity), Container security tools (Aqua, Invicti etc.), Secret scanning tools (GHAS Git Guardian etc.).\nUnderstanding of OWASP Top 10 and secure coding practices.\nExperience with cloud platforms (AWS/Azure/GCP) and basic cloud security concepts.\nExposure to container technologies and security tools (Docker, Kubernetes).\nUnderstanding of DevSecOps practices and SSDLC frameworks (OWASP SAMM, NIST SSDF).\nHands-on experience with SCM tools (GitHub, GitLab, Bitbucket) and pipeline integrations.\nGood understanding of threat modeling concepts (e.g., STRIDE).\nExposure to AI/ML or GenAI tools in development/security workflows (e.g., AI-assisted code analysis, automation).\nStrong problem-solving skills and ability to work in cross-functional teams.\nTo qualify for the role, you must have\nBE/ B.Tech/ MCA.\nCertifications: Mandatory to have any one of the below certifications,\no Azure Security Architect (Az-500)\no AWS security speciality certification (SCS-C01)\nKnowledge of Windows, Linux, UNIX, any other major operating systems.\nStrong Excel and PowerPoint skills.\nIdeally, you’ll also have\nProject management skills\nCertifications: CSSLP, Certified DevSecOps Professional\nWhat we look for\nA candidate who can build a complete CI/CD pipeline from scratch, prepare, and work around a maturity model and optimize the pipeline to integrate the best tools according to the client requirement.\nWhat working at EY offers\nAt EY, we’re dedicated to helping our clients, from start-ups to Fortune 500 companies - and the work we do with them is as varied as they are.\nYou get to work with inspiring and meaningful projects. Our focus is education and coaching alongside practical experience to ensure your personal development. We value our employees and you will be able to control your own development with an individual progression plan. You will quickly grow into a responsible role with challenging and stimulating assignments. Moreover, you will be part of an interdisciplinary environment that emphasizes high quality and knowledge exchange. Plus, we offer:\nSupport, coaching and feedback from some of the most engaging colleagues around\nOpportunities to develop new skills and progress your career\nThe freedom and flexibility to handle your role in a way that’s right for you\nAbout EY\nAs a global leader in Assurance, Tax, Strategy & transactions and Consulting services, we’re using the finance products, expertise and systems we’ve developed to build a better working world. That starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. Whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. And with a commitment to hiring and developing the most passionate people, we’ll make our ambition to be the best employer by 2020 a reality.\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.","description_format":"text","description_chars":6485,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-11-03T12:53:04Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":28,"reasons":["conf:0","velocity","win:early","comp:brand"],"computed_at":"2026-11-05T05:54:30Z"},"pay":null,"html_url":"https://alion.io/job/ey-senior-devsecops-cebu","json_url":"https://alion.io/job/ey-senior-devsecops-cebu.json","meta":{"generated_at":"2026-11-05T07:32:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9528,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-06T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-senior-devsecops-cebu"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-senior-devsecops-cebu"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-senior-devsecops-cebu"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-senior-devsecops-cebu\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-senior-devsecops-cebu"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3680455}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3680455},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}