Sr. DevSecOps Manager

We are Lenovo. We do what we say. We own what we do. We WOW our customers.

Lenovo is a US$83 billion revenue global technology powerhouse, ranked #153 in the Fortune Global 500, and serving millions of customers every day in 180 markets. Focused on a bold vision to deliver Smarter Technology for All, Lenovo has built on its success as the world’s largest PC company with a full-stack portfolio of AI-enabled, AI-ready, and AI-optimized devices (PCs, workstations, smartphones, tablets), infrastructure (server, storage, edge, high performance computing and software defined infrastructure), software, solutions, and services. Lenovo’s continued investment in world-changing innovation is building a more equitable, trustworthy, and smarter future for everyone, everywhere. Lenovo is listed on the Hong Kong stock exchange under Lenovo Group Limited (HKSE: 992) (ADR: LNVGY).

This transformation together with Lenovo’s world-changing innovation is building a more inclusive, trustworthy, and smarter future for everyone, everywhere. To find out more visit www.lenovo.com, and read about the latest news via our StoryHub.

We are seeking a DevSecOps Manager to lead the integration of security across our software development and infrastructure lifecycle. This role combines technical leadership, team management, and security strategy to drive "shift-left" security at scale.

Key Responsibilities

• Lead and mentor a team of DevSecOps engineers, defining roadmaps and OKRs for secure CI/CD and infrastructure automation.
• Design and enforce security controls embedded in the software development lifecycle (SDLC), including SAST, DAST, SCA, container scanning, and secret detection.
• Partner with development, security, and operations teams to establish secure cloud architectures and infrastructure as code (IaC) best practices.
• Drive adoption of security-as-code, policy-as-code, and compliance automation (CIS, SOC2, ISO27001, FedRAMP where applicable).
• Establish metrics, SLIs/SLOs for security posture, pipeline health, and vulnerability remediation.
• Lead incident response and root cause analysis for security events tied to CI/CD or cloud infrastructure.
• Evaluate and select DevSecOps tooling, balancing security value with developer productivity.

Position Requirements

• Bachelor’s or Master’s degree in Computer Science, Engineering, or a related technical field
• 8 years of professional experience in DevOps, DevSecOps, Cloud Engineering, or a related role
• Hands‑on experience with CI/CD platforms such as GitLab, Jenkins, or Bitbucket
• Strong experience with containers and orchestration technologies including Docker and Kubernetes
• Solid understanding of secure SDLC principles, DevSecOps methodologies, and cloud‑native architectures
• Proficiency in scripting and automation using Python and Bash
• Experience working in distributed, cross‑functional, and international engineering teams

What Lenovo Can Offer You

Compensation Rewards

• Performance-based salary reviews and annual bonuses
• Meal tickets, service anniversary awards, and referral bonuses
• Employee share purchase program
• Scholarships for employees’ children

Health Well-being

• Fully covered private medical insurance
• Annual well-being allowance for sports, training, relaxation, and therapy, and on-site chair massage
• Life accident insurance with extra medical coverage
• Employee Assistance Program

Training Development

• Technical Ladder Sales Excellence programs
• Individual Career Development Plans with mentoring
• Bookster subscription for continuous learning

Time Away

• 21–28 vacation days depending on tenure
• Sick days and extra paid leave for public holidays on weekends
• Additional paid leave for employees with children

We are an Equal Opportunity Employer and do not discriminate against any employee or applicant for employment because of race, color, sex, age, religion, sexual orientation, gender identity, national origin, status as a veteran, and basis of disability or any federal, state, or local protected class.