{"id":1249064,"url":"https://alion.io/job/gic-avpvp-product-engineer-devsecops-technology-group","title":"AVP/VP, Product Engineer (DevSecOps), Technology Group","company":{"id":2761,"name":"GIC","domain":"gic.com.sg","url":"https://alion.io/company/gic","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Backend","role_family":"Backend","seniority":"head","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":63000,"max_usd":152000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":130},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"CodeQL","optional":false},{"name":"Confluence","optional":false},{"name":"Docker","optional":false},{"name":"GitHub","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"Jenkins","optional":false},{"name":"JFrog Artifactory","optional":false},{"name":"JFrog Xray","optional":false},{"name":"Jira","optional":false},{"name":"Kubernetes","optional":false},{"name":"LLM Guardrails","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Snyk","optional":false},{"name":"Terraform","optional":false},{"name":"Wiz","optional":false}],"status":"live","first_seen_at":"2026-09-15T16:00:00Z","employer_posted_date":"2026-09-15","last_verified_at":"2026-10-17T13:10:21Z","board_verified":true,"closed_at":null,"days_open":32,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":32},"description":"About GIC\nGIC is one of the world's largest sovereign wealth funds. With over 2,000 employees across 11 locations around the world, we invest in more than 40 countries globally across asset classes and businesses. Working at GIC gives you exposure to an extraordinary network of the world's industry leaders. As a leading global long-term investor, we work at the Point of Impact for Singapore's financial future, and the communities we invest in worldwide.\nTechnology Group\nWe experiment, design, and lead a 24×7 global business where we support core capabilities in asset management, trading, investment operations, and risk management. We deliver secure, reliable, and integrated solutions, and provide insights on new and emerging technologies.\nStrategy, Architecture, and Transformation Group\nThe Strategy, Architecture & Transformation (SAT) group shapes and drives GIC’s technology strategy, ensuring alignment with business priorities and enterprise goals. Bringing together expertise in strategy, architecture, engineering, and transformation, the team strengthens governance, promotes consistency, and accelerates delivery across the Technology Group. Through modern practices and close collaboration, SAT leads the development of an architectural strategy that reinforces oversight and accountability while enabling reliable, scalable solutions and informed decision making across the Technology Group and, more broadly, across GIC.\nDeveloper Experience\nThe Developer Experience team builds and operates the products and platforms that support the developer experience across GIC's Technology Group. The team is organised around three product pillars:\nProject Management Tooling - Platforms such as Jira and Confluence that support project tracking, collaboration, and workflow management across the Technology Group.\nCloud Development Environments & IDEs - Cloud-based development environments, AI-assisted coding tools, developer toolchains (CLIs, SDKs, IDE extensions, devcontainer features), and agentic development capabilities.\nDevSecOps & CI/CD - CI/CD pipelines, artifact management, security scanning integration, infrastructure-as-code, and secure software delivery tooling.\nWhat impact can you make in this role?\nAs a Product Engineer (DevSecOps), you will own and drive the delivery of DevSecOps and CI/CD platform products that underpin secure software delivery across GIC's Technology Group. You will take a product-oriented approach to engineering - understanding developer needs, defining roadmaps, and delivering solutions that improve delivery velocity while meeting the organisation's security and governance requirements.\nThis role requires someone who thinks beyond code. You will design and maintain the pipelines, tooling, and security integrations that development teams depend on daily. You will need to balance developer experience with enterprise security constraints, advocate for your platform's users, and make pragmatic trade-offs between speed, security, and scalability.\nWhat will you do as a Product Engineer (DevSecOps)?\nProduct Ownership & DeliveryOwn the end-to-end lifecycle of DevSecOps platform products - from discovery and design through to delivery, adoption, and iteration.\nEngage with engineering teams across the organisation to understand their build, test, deployment, and security workflows, pain points, and needs.\nDefine and prioritise product backlogs based on user feedback, operational data, and strategic direction.\nDeliver incremental improvements and new capabilities through agile delivery practices.\nTrack and measure product success through adoption, satisfaction, and toil reduction metrics.\nPublish documentation, onboarding guides, and self-help templates with guardrails that development teams can use.\n\nCI/CD Pipeline EngineeringDesign, build, and maintain secure and scalable CI/CD pipelines that support efficient and reliable software delivery across the organisation.\nImplement and manage continuous integration and continuous deployment processes using platforms such as GitHub Actions, Jenkins, or GitLab CI.\nCollaborate with development teams for continuous enhancements, pipeline reviews, and adoption of pipeline best practices.\nAutomate self-help processes, reusable pipeline templates, and guardrails that development teams can consume with minimal friction.\nConduct peer code reviews and provide technical mentorship on CI/CD and DevSecOps practices.\n\nArtifact Management & Supply Chain SecurityManage and operate artifact management platforms (e.g. JFrog Artifactory, Xray), including repository configuration, access controls, vulnerability scanning, and lifecycle policies.\nScan and analyse artifacts for security vulnerabilities and license compliance using tools such as JFrog Xray.\nGovern open-source software usage, dependency management, and software composition analysis across the organisation's delivery pipelines.\n\nSecurity Integration & Vulnerability ManagementIntegrate security scanning tools - SAST, DAST, SCA, and secrets detection - into CI/CD pipelines and developer workflows.\nLeverage GitHub Advanced Security features such as CodeQL (SAST), secret scanning, and dependency analysis.\nIntegrate container and infrastructure scanning tools (e.g. Snyk, Wiz) into delivery workflows.\nManage the vulnerability lifecycle - scanning, triage, patching - and ensure security gates are embedded in delivery pipelines.\nStay up-to-date with the latest security trends, technologies, and best practices, and provide recommendations for improvement.\nBalance security controls with developer productivity, finding practical solutions that protect without creating unnecessary friction.\n\nStakeholder EngagementPartner with engineering leads, architects, and business stakeholders to align platform capabilities with organisational priorities.\nCommunicate product direction, trade-offs, and decisions clearly to both technical and non-technical audiences.\nCollaborate with development, cloud, and security teams to integrate best practices into the software development lifecycle.\nConduct system integration tests and coordinate with business users on user acceptance tests where applicable.\n\nWhat makes you a successful candidate?\nExperience & BackgroundBachelor's degree in Computer Science, Engineering, Information Technology, or a related discipline.\nAt least 5 years of relevant experience in software engineering, platform engineering, or product engineering roles.\nExperience working in enterprise or regulated technology environments is advantageous.\n\nCI/CD and DevSecOpsDeep understanding of DevOps principles, practices, and tools, including CI/CD pipeline design and operation.\nProficiency in using GitHub for version control, collaboration, and code review processes. Experience configuring and managing CI/CD pipelines using GitHub Actions.\nHands-on experience with artifact management platforms (e.g. JFrog Artifactory, Xray), including repository management, vulnerability scanning, and license compliance.\nFamiliarity with GitHub Advanced Security features such as CodeQL (SAST), secret scanning, and dependency analysis.\nExperience integrating security scanning tools (SAST, DAST, SCA, secrets detection) and container/infrastructure scanning tools (e.g. Snyk, Wiz) into delivery pipelines.\n\nCloud and InfrastructureProficiency with infrastructure-as-code (e.g. Terraform) and cloud platforms (AWS preferred, Azure), including compute, networking, identity, and storage services.\nProficiency in AWS technologies or their equivalent such as OIDC, STS, AWS CLI, and CloudFormation.\nExperience with containerisation technologies (e.g. Docker, Kubernetes).\nGood understanding of security and networking principles, protocols, and technologies.\n\nProduct & Delivery MindsetDemonstrated ability to think about engineering work through a product lens - understanding users, measuring outcomes, and iterating based on feedback.\nComfortable owning a product backlog and making prioritisation decisions.\nExperience working in agile teams with a focus on incremental delivery.\n\nGovernance & Ways of WorkingAbility to balance developer experience and autonomy with enterprise requirements for security, standardisation, and cost control.\nStrong stakeholder management skills, with the ability to work across engineering, platform, and cybersecurity teams.\nComfortable navigating competing priorities and driving alignment.\n\nPersonal AttributesClear and effective communicator, both written and verbal.\nPragmatic, structured, and outcome-focused.\nConsistently demonstrates GIC's PRIME values: Prudence, Respect, Integrity, Merit, and Excellence.\n\nWork at the Point of Impact\nWe need to be forward-looking to attract the right people to help us become the Leading Global Long-term Investor. Join our ambitious, agile, and diverse teams - be empowered to push boundaries and pursue innovative ideas, share your views, and be heard. Be anchored on our PRIME Values: Prudence, Respect, Integrity, Merit and Excellence, which guides us in how we make our day-to-day decisions. We strive to inspire. To make an impact.\nFlexibility at GIC\nAt GIC, our offices are vibrant hubs for ideation, professional growth, and interpersonal connection. At the same time, we believe that flexibility allows us to do our best work and be our best selves. Thus, our teams come into the office four days per week to harness the benefits of in-person collaboration, but have the flexibility to choose which days they work from home and adjust this arrangement as situational needs arise.\nGIC is an equal opportunity employer\nGIC is an equal opportunity employer, and we value diversity. We do not discriminate based on race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.\nLearn more about our Technology Group here:\nhttps://gic.careers/group/technology-group/","description_format":"text","description_chars":10173,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Pension & Sovereign Wealth Funds"],"lifecycle":[{"event":"open","at":"2026-09-25T18:14:55Z"}],"visa":[],"liveness":{"score":38,"band":"fade","label":"Fading","p_open":1,"p_active":0.699,"p_room":0.55,"age_days":31,"expected_fill_days":22,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/gic-avpvp-product-engineer-devsecops-technology-group","json_url":"https://alion.io/job/gic-avpvp-product-engineer-devsecops-technology-group.json","meta":{"generated_at":"2026-10-17T19:14:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2518,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2761},"rest":"https://alion.io/mcp/rest/get_company?id=2761"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgic-avpvp-product-engineer-devsecops-technology-group"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgic-avpvp-product-engineer-devsecops-technology-group"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgic-avpvp-product-engineer-devsecops-technology-group"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gic-avpvp-product-engineer-devsecops-technology-group\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgic-avpvp-product-engineer-devsecops-technology-group"}]}