DevSecOps Specialist

Company Description Bangkok MSP (BMSP) is a leading IT Security Managed Service Provider in Thailand, offering cloud-based subscription solutions and globally recognized cybersecurity services. The company protects organizations of all sizes and sectors from evolving cyber threats through tailored, cost-effective security solutions. BMSP focuses on understanding each client’s unique risk profile and operational needs to deliver highly customized protection. Team members work with modern technologies, diverse customer environments, and international standards, contributing directly to secure and resilient digital operations. Role Description The DevSecOps Specialist is a full-time, on-site role based in Bangkok. This role is responsible for integrating security practices into the software development and operations lifecycle, ensuring secure design, deployment, and maintenance of applications and infrastructure. Day-to-day activities include implementing CI/CD pipelines with security controls, automating security testing, collaborating with development and operations teams on secure coding and configuration, and monitoring environments for vulnerabilities and misconfigurations. The specialist will help define security standards, support incident response efforts, contribute to documentation and process improvements, and work closely with clients and internal stakeholders to maintain robust, compliant, and efficient security operations. Qualifications Strong DevOps and cloud infrastructure skills, such as CI/CD pipeline management, containerization (e.g., Docker, Kubernetes), and cloud platforms (e.g., AWS, Azure, GCP).Core security and DevSecOps skills, including vulnerability management, secure configuration, security automation, and integration of security tools into development workflows.Solid software engineering and scripting abilities, with experience in languages or tools commonly used for automation (e.g., Python, Bash, PowerShell) and familiarity with secure coding practices.Proficiency with monitoring, logging, and observability tools, and experience analyzing security-related events and alerts to support incident detection and response.Understanding of network and system security fundamentals, including firewalls, encryption, identity and access management, and security best practices for Linux/Windows environments.Experience working within or aligning to security standards and frameworks (e.g., ISO 27001, NIST, CIS Benchmarks) is highly beneficial.Bachelor’s degree in Computer Science, Information Security, Engineering, or a related field, or equivalent practical experience.Relevant certifications such as Security+, CEH, CISSP, or DevSecOps/Cloud security certifications are a plus.Ability to collaborate with cross-functional teams, communicate clearly with technical and non-technical stakeholders, and document processes and procedures effectively.Strong problem-solving mindset, attention to detail, and willingness to continuously learn and adapt to new security threats and technologies.