This is a remote position.
Join one of the Philippines' fastest-growing tech companies. Open to Philippine-based candidates only, with required overlap with US Central business hours.
About Us
Full Scale is a fully remote-first company that helps businesses build dedicated teams of skilled software engineers. We make it easier for growing companies to find, onboard, and retain high-performing software talent.
About the Role
We are looking for a Staff DevSecOps Engineer to improve security across our Azure cloud infrastructure, Kubernetes environments, CI/CD pipelines, and production systems.
You’ll work closely with engineering, IT, quality, product, and compliance teams to identify security gaps, implement practical solutions, and strengthen our overall security posture.
Key Responsibilities
- Secure and improve CI/CD pipelines, including SAST, SCA, secrets, IaC, and container scanning.
- Strengthen Azure and AKS security, including identity, networking, secrets, and workload security.
- Improve Kubernetes and container security.
- Establish and maintain infrastructure security baselines using Terraform, Bicep, or similar tools.
- Lead vulnerability management, prioritization, remediation, and reporting.
- Improve privileged access using least-privilege and just-in-time access.
- Partner with developers on secure coding, dependency management, and security reviews.
- Support security incidents, audits, compliance activities, and technical documentation.
Requirements
- 5+ years of experience in DevOps, SRE, platform engineering, cloud security, security engineering, or related roles.
- 2+ years of experience in DevSecOps, cloud security, application security, or production security.
- Strong hands-on experience with Azure, AKS, and Entra ID.
- Strong experience with CI/CD and software supply chain security.
- Hands-on Kubernetes and container security experience.
- Experience with Terraform, Bicep, or similar IaC tools.
- Scripting experience with Python, Go, Bash, PowerShell, or similar.
- Experience with vulnerability management and risk-based prioritization.
- Experience with least-privilege and just-in-time access.
- Strong communication skills and ability to work independently and influence engineering teams.
Nice to Have
- Experience in regulated environments such as HIPAA, SOC 2, ISO 27001, healthcare SaaS, or fintech.
- Experience with Aikido, CrowdStrike, Vanta, Azure Policy, Defender for Cloud, Sentinel, or Key Vault.
- Experience with threat modeling, incident response, disaster recovery, or security architecture.
- Certifications such as Azure Security Engineer, CKS, CCSP, or CISSP.
Benefits
Why Join Us
- 100% remote work setup
- Work from anywhere in the Philippines
- High-impact role with direct leadership visibility
- Opportunity to shape cloud and security practices
- Work on challenging cloud, Kubernetes, and software security problems
- Collaborative team that values ownership, trust, and technical excellence
— Sarah J.
·
Marketing Manager
★★★★★
Verified
