DevSecOps Analyst

Overview

Quantuma Kuala Lumpur, Federal Territory of Kuala Lumpur, Malaysia

Role Purpose : Embed security, compliance, and automation into build and release processes so teams can ship fast and safely across all K3 brands and divisions.

Key Responsibilities :

• Implement CI / CD templates with SAST / DAST / SCA and container scanning
• Enforce secrets management (OIDC to Key Vault, no long-lived credentials)
• Define and monitor policy gates for secure code
• Build SBOM generation, image signing, and provenance
• Automate compliance evidence and deployment checklists
• 3+ years in DevOps / DevSecOps with GitHub Actions or Azure DevOps
• Hands-on with CodeQL / OWASP ZAP / Snyk / Trivy / Checkov
• Docker / Kubernetes fundamentals and scripting skills
• Track record reducing vulnerability backlog and failed deployments
• Experience with supply chain security (Sigstore / cosign)
• You will be a Malay National to be considered

Success Measures :

Salary Range :

RM 126,000 - 172,000 per year + competitive benefits package included

Location : Kuala Lumpur, Malaysia (Hybrid working model)

Seniority level

Employment type

Job function

#J-18808-Ljbffr