{"id":4175691,"url":"https://alion.io/job/site-azqore-senior-devsecops-engineer","title":"Senior DevSecOps Engineer","company":{"id":695092,"name":"Site Azqore","domain":"azqore.com","url":"https://alion.io/company/azqore","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Singapore"],"countries":["SG"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ansible","optional":false},{"name":"CI/CD","optional":false},{"name":"Design Controls","optional":false},{"name":"GitLab","optional":false},{"name":"GitLab CI","optional":false},{"name":"HashiCorp Vault","optional":false},{"name":"Least Privilege","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-11-12T08:10:28Z","employer_posted_date":"2026-11-12","last_verified_at":"2026-11-12T15:59:33Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Azqore, a next-generation provider of Information Systems and banking operations services, is a subsidiary of Indosuez Wealth Management, the wealth management arm of the Crédit Agricole Group. As a global company, Azqore is committed to providing wealth managers with integrated, turnkey digital solutions.\nWith its headquarters in Switzerland and its Asia hub in Singapore, Azqore currently serves around thirty clients through its proprietary S2i platform, supporting approximately CHF 200 billion in assets under management.\nAt the heart of our strategy, we are looking for a Senior DevSecOps Engineer in charge of design, build and industrialise security controls across the software development lifecycle and CI/CD supply chain. The engineer will create secure-by-default delivery patterns, integrate automated controls into GitLab pipelines, establish actionable vulnerability workflows and help application and platform teams adopt the controls at scale.\nYour responsibilities\nDevSecOps framework and governance - Assess the current delivery landscape; contribute to and implement the agreed DevSecOps control framework, ownership model and exception process across IWM / Azqore.\n\nRisk-based security gates and vulnerability management - Create ownership, SLAs, triage, remediation, exception expiry and evidence workflows. Ensure findings become actionable work rather than dashboard-only alerts.\n\nSecure CI/CD engineering - Design and maintain reusable GitLab CI/CD templates and golden pipelines (approved, reusable CI/CD templates) with protected branches, approvals, controlled runners, signed or trusted components and secure deployment patterns.\n\nAutomated security testing - Integrate and tune SAST, SCA, secret detection, IaC scanning, container-image scanning and, where applicable, DAST. Define risk-based blocking thresholds and prevent excessive false positives.\n\nSoftware supply-chain security - Establish artefact governance, SBOM generation and retention, image provenance, trusted base images and lifecycle controls for Nexus and internal registries.\n\nInfrastructure as Code - Secure Terraform and Ansible workflows, including module review, policy checks, secret handling and promotion between environments.\n\nSecrets and identities - Promote no-secrets-in-repositories patterns and integrate HashiCorp Vault, workload identities, tokens and least-privilege service access into delivery workflows.\n\nEnablement - Coach development and platform teams, contribute to Security Champion activities, publish practical standards and support pilot teams through adoption.\n\nMetrics and assurance - Produce coverage, failure, remediation and exception KPIs; ensure evidence is available for management, risk, audit and regulatory reviews.\n\nOperational improvement - Support incident analysis and recurring control failures; automate repetitive checks and progressivelytransfer mature capabilities into an agreed Run model.\n\nYour core competencies\nBachelor Degree in Cybersecurity, Computer Science or equivalent\n\nMinimum 8 years delivery and hands-on security experience with:\nGitLab CI/CD pipeline engineering and reusable component design.\n\nPractical implementation of SAST, SCA, secret, IaC and container scanning.\n\nTerraform and scripting in Python, Bash or PowerShell.\n\nVulnerability triage, remediation workflows and risk-based security gates.\n\nArtefact repository, container registry and dependency governance.\n\nSolid application-security fundamentals.\n\nAbility to design controls that developers can adopt without bypassing them.\n\nProven achievements as a hands-on architect-builder who can turn an incomplete requirement into a clear security design, working implementation, evidence, documentation and an operational handover.\n\nKeen to roll up sleeve and do beyond advisory work but also involved in deployment and production support work.\n\nUnderstands availability, recoverability, change control, audit evidence, operational ownership and supportability.\n\nYou are autonomous, tenacious and rigorous. Boredom won't be part of your day, but you need to know how to organize yourself to manage the multiple issues underway.","description_format":"text","description_chars":4147,"description_truncated":false,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"phd","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","Digital Banks & Neobanks"],"lifecycle":[{"event":"open","at":"2026-11-12T15:59:33Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:0","win:early"],"computed_at":"2026-11-12T16:53:41Z"},"pay":null,"html_url":"https://alion.io/job/site-azqore-senior-devsecops-engineer","json_url":"https://alion.io/job/site-azqore-senior-devsecops-engineer.json","meta":{"generated_at":"2026-11-12T16:53:41Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35425,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-13T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":695092},"rest":"https://alion.io/mcp/rest/get_company?id=695092"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsite-azqore-senior-devsecops-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsite-azqore-senior-devsecops-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsite-azqore-senior-devsecops-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/site-azqore-senior-devsecops-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsite-azqore-senior-devsecops-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":4175691}},{"tool":"search_jobs","arguments":{"company":"azqore.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":4175691},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}