DevSecOps Engineer

Be #InGoodHands with Metrobank!

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development. With Metrobank, a meaningful life is within your reach!

The DevSecOps Engineer integrates development, security, and operations to strengthen end-to-end system security. This role focuses on building and maintaining scalable, secure, and reliable systems, while improving the security of both development and production environments. The position works closely with development and operations teams to ensure security is built into all stages of the process.

Key Responsibilities

• Work with software engineers to identify where security should be applied in the development process.
• Develop, test, and implement secure coding practices and standards.
• Automate security controls, data protection, and vulnerability management within deployment pipelines.
• Continuously monitor applications and infrastructure to detect vulnerabilities and ensure timely fixes.
• Support incident response activities, including investigation and analysis of security events.
• Conduct regular security assessments, audits, and compliance checks.
• Provide guidance and training to teams on secure coding and threat prevention.
• Document and communicate security policies, procedures, and how they support business processes.
• Stay updated on the latest security trends and technologies and apply them to improve system security.

Qualification

• Bachelor’s degree in computer science, Engineering, or related field
• 5+ years of relevant experience in DevSecOps or similar roles
• Experience with DevSecOps tools (e.g., Ansible, Jenkins, Artifactory, Jira, Black Duck, Terraform, Git)
• Familiar with security frameworks and industry standards
• Knowledge of DevOps automation tools (e.g., Terraform, GitHub, GitHub Actions)
• Experience with security tools and services (e.g., Prisma Cloud, SIEM, SOC, Nessus, CrowdStrike)
• Strong problem-solving and analytical skills
• Good communication and teamwork skills
• Ability to learn quickly and adapt to new technologies

Nice to Have

• Knowledge of SQL and scripting languages (e.g., Bash, Python, PowerShell, Ruby, Perl)
• Experience with CI/CD pipelines, Kubernetes, Docker, and cloud platforms
• Familiarity with version control tools (e.g., Git, SVN)