{"id":4228218,"url":"https://alion.io/job/setel-lead-cloud-devsecops-security-engineering","title":"Lead, Cloud & DevSecOps Security Engineering","company":{"id":49708,"name":"Setel","domain":"setel.com","url":"https://alion.io/company/setel","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"BrioHR","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Malaysia"],"countries":["MY"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Amazon EKS","optional":false},{"name":"Ansible","optional":false},{"name":"API Gateway","optional":false},{"name":"AWS","optional":false},{"name":"Azure AKS","optional":false},{"name":"CI/CD","optional":false},{"name":"CloudFormation","optional":false},{"name":"Istio","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linkerd","optional":false},{"name":"PCI DSS","optional":false},{"name":"Red Teaming","optional":false},{"name":"Self-Healing","optional":false},{"name":"Service Mesh","optional":false},{"name":"Shift-Left Security","optional":false},{"name":"Terraform","optional":false},{"name":"Zero Trust","optional":false},{"name":"Azure","optional":true}],"status":"live","first_seen_at":"2026-11-13T08:42:46Z","employer_posted_date":"2026-11-13","last_verified_at":"2026-11-13T08:42:46Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"About Setel:\nThe Future of Mobility\nIntroduced in July 2018, Setel is a mobile platform that aims to delight customers by innovating for better, inclusive mobility. Setel serves customers across Malaysia by powering one app as the constant companion to ease motorists’ journey across fueling, parking, EV charging, motor insurance, road tax, auto assistance, general purchases, and more across an ecosystem of PETRONAS petrol stations, retail partners, and online merchants.\nRole Purpose:\nLead the design, implementation, and automation of security controls across cloud environments, CI/CD pipelines, and API architectures. Operating as\npart of 1st Line Engineering under the CTO, this role embeds security directly into the software development lifecycle (SDLC) and cloud infrastructure,\ndriving security-as-code and executing code-level fixes for vulnerabilities identified during build stages or 2nd Line VAPT audits.\nIn This Role You Will:\nCI/CD Pipeline Security Automation: Integrate automated pre-production security testing tools (SAST, DAST, SCA, Container Scanning) directly into DevOps CI/CD deployment pipelines to catch bugs before code hits production environments.\nSecurity as Code (IaC): Develop, maintain, and enforce Infrastructure as Code (IaC) security scanning templates (Terraform, CloudFormation, Ansible) to catch cloud misconfigurations prior to deployment.\nCloud Posture & API Security: Implement API security standards, OAuth/OIDC authentication policies, Cloud Security Posture Management (CSPM), and container security policies (EKS/AKS/K8s).\nVAPT Remediation Lead: Act as the primary technical hands-on lead to patch, re-engineer, and fix application and infrastructure flaws discovered during 2nd Line manual VAPT exercises or penetration tests.\nRemediation SLA Tracking: Coordinate with Software Developers and DevOps Engineers to ensure critical and high-severity VAPT findings are resolved within agreed SLA windows.\nSecurity Tooling Automation: Build custom scripts, tools, and API integrations to automate repetitive security workflows, developer feedback loops, and remediation pipelines.\nGeneral Responsibilities: All employees are required to ensure adherence to the compliance of company policies, industry regulations and legal requirements.\nYou're A Great Fit If You Have:\n6-9 years in cloud security architecture, DevSecOps leadership, and secure software engineering operating within a fast-paced CTO/Engineering organization.\nProven track record of designing enterprise-wide DevSecOps strategies, establishing security-as-code standards, and leading engineering teams through complex VAPT remediation cycles.\nDesigning zero-friction DevSecOps architectures, custom security orchestrations, automated developer feedback loops, and self-healing cloud posture automation (CSPM).\nDesigning multi-cloud zero-trust architectures, service mesh security (Istio/Linkerd), API gateway authentication models, and microservices isolation.\nStrategizing structural code and infrastructure redesigns to permanently eliminate recurring classes of security vulnerabilities identified by 2LoD Red Team assessments.\nCertified DevSecOps Expert (CDE) or SANS SEC540 (Cloud Security and DevSecOps Automation).\nCertified Information Systems Security Professional (CISSP) or Certified Cloud Security Professional (CCSP).\nAWS Certified Solutions Architect - Professional or AWS Certified Security - Specialty.\nDesigning immutable CI/CD pipeline deployment gates and automated audit logging to fulfill BNM RMiT system integrity and change management requirements.\nStructuring secure containerized environments and API payment gateways to align with PCI DSS v4.0 (Requirement 6, 8, & 10) and PayNet scheme security standards.\nChampioning shift-left security architecture to maintain regulatory compliance without decreasing developer release velocity.\nVAPT Remediation Lead: Serves as the primary 1LoD engineering counterpart to 2LoD Cyber Defense (Red/Blue Teams) to review, prioritize, and allocate resources for deep application/cloud remediation.\nFormulates and defends technical compensating controls with 2LoD GRC when application code or legacy dependencies cannot be immediately patched.\nCollaborates with 2LoD Compliance Assurance to define mandatory deployment blocking conditions within CI/CD pipelines.\nWhat Makes Working With Us Awesome\nOur people and culture- You will get to work with awesome and friendly colleagues with whom you can expect to collaborate well to deliver your work. Empowerment is given and you will get a lot of opportunities for peer learning.\nAvailability of tools and applications: You will be provided with different tools to facilitate your work. Automate your work whenever possible so that you can focus on delivering impact for your role.\nDevelopment-focused- Your learning and growth matter most to us. We are people-centric and always ready to help our people to define what they want to make an impact on and craft their learning plan accordingly.\nCool Perks/Benefits\nHybrid working arrangement; Flexible working hours\nRelax and unwind in the leisure area with video games, board games, books, and more.\nWear your favourite jeans, or any cool OOTD so that you can work comfortably (in style).\nCoffee, tea, or snacks are available for consumption at the pantry. Because you’ll be happier with a full tummy.\nA healthy body leads to a brilliant mind. Let’s get moving with the inter-company sports team.\nThere will be workshops, talent shows, sports activities, and other events for sharing and bonding.\nPersonal Data Protection\nSetel Ventures Sdn Bhd (“Setel”, “we”, “our” “us”) is committed to protecting and respecting your privacy. This Setel privacy statement (“Privacy Statement”) explains what personal data we collect about you, when and why we collect it, how we use it, the conditions under which we may disclose it to others, your rights to your personal data, and how we keep it secure. This Privacy Statement covers both our online and offline collection activities, including personal data that we collect through online platforms such as websites, applications, third-party social networks or our online and physical events, or through other third parties that we work with. Please read this Privacy Statement carefully to understand our views and practices regarding your personal data.\n#LI-JT1","description_format":"text","description_chars":6371,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Flexible schedule","Hybrid work","Sports activities"],"hiring_locations":[{"name":"Malaysia","iso":"MY","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Retail & Shop Systems","EV Charging"],"lifecycle":[{"event":"open","at":"2026-11-13T08:42:46Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":19,"reasons":["conf:1","win:early"],"computed_at":"2026-11-13T10:23:26Z"},"pay":null,"html_url":"https://alion.io/job/setel-lead-cloud-devsecops-security-engineering","json_url":"https://alion.io/job/setel-lead-cloud-devsecops-security-engineering.json","meta":{"generated_at":"2026-11-13T10:23:26Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21258,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":49708},"rest":"https://alion.io/mcp/rest/get_company?id=49708"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsetel-lead-cloud-devsecops-security-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"free","price":{"credits":0,"usd":0},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsetel-lead-cloud-devsecops-security-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsetel-lead-cloud-devsecops-security-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/setel-lead-cloud-devsecops-security-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsetel-lead-cloud-devsecops-security-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4228218}},{"tool":"search_jobs","arguments":{"company":"setel.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4228218},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}