Azqore, a next-generation provider of Information Systems and banking operations services, is a subsidiary of Indosuez Wealth Management, the wealth management arm of the Crédit Agricole Group. As a global company, Azqore is committed to providing wealth managers with integrated, turnkey digital solutions.
With its headquarters in Switzerland and its Asia hub in Singapore, Azqore currently serves around thirty clients through its proprietary S2i platform, supporting approximately CHF 200 billion in assets under management.
At the heart of our strategy, we are looking for a Senior DevSecOps Engineer in charge of design, build and industrialise security controls across the software development lifecycle and CI/CD supply chain. The engineer will create secure-by-default delivery patterns, integrate automated controls into GitLab pipelines, establish actionable vulnerability workflows and help application and platform teams adopt the controls at scale.
👨🔧 Your responsibilities
DevSecOps framework and governance - Assess the current delivery landscape; contribute to and implement the agreed DevSecOps control framework, ownership model and exception process across IWM / Azqore.
Risk-based security gates and vulnerability management - Create ownership, SLAs, triage, remediation, exception expiry and evidence workflows. Ensure findings become actionable work rather than dashboard-only alerts.
Secure CI/CD engineering - Design and maintain reusable GitLab CI/CD templates and golden pipelines (approved, reusable CI/CD templates) with protected branches, approvals, controlled runners, signed or trusted components and secure deployment patterns.
Automated security testing - Integrate and tune SAST, SCA, secret detection, IaC scanning, container-image scanning and, where applicable, DAST. Define risk-based blocking thresholds and prevent excessive false positives.
Software supply-chain security - Establish artefact governance, SBOM generation and retention, image provenance, trusted base images and lifecycle controls for Nexus and internal registries.
Infrastructure as Code - Secure Terraform and Ansible workflows, including module review, policy checks, secret handling and promotion between environments.
Secrets and identities - Promote no-secrets-in-repositories patterns and integrate HashiCorp Vault, workload identities, tokens and least-privilege service access into delivery workflows.
Enablement - Coach development and platform teams, contribute to Security Champion activities, publish practical standards and support pilot teams through adoption.
Metrics and assurance - Produce coverage, failure, remediation and exception KPIs; ensure evidence is available for management, risk, audit and regulatory reviews.
Operational improvement - Support incident analysis and recurring control failures; automate repetitive checks and progressively transfer mature capabilities into an agreed Run model.
🧙♂️ Your core competencies
Bachelor Degree in Cybersecurity, Computer Science or equivalent
Minimum 8 years delivery and hands-on security experience with:
GitLab CI/CD pipeline engineering and reusable component design.
Practical implementation of SAST, SCA, secret, IaC and container scanning.
Terraform and scripting in Python, Bash or PowerShell.
Vulnerability triage, remediation workflows and risk-based security gates.
Artefact repository, container registry and dependency governance.
Solid application-security fundamentals.
Ability to design controls that developers can adopt without bypassing them.
Proven achievements as a hands-on architect-builder who can turn an incomplete requirement into a clear security design, working implementation, evidence, documentation and an operational handover.
Keen to roll up sleeve and do beyond advisory work but also involved in deployment and production support work.
Understands availability, recoverability, change control, audit evidence, operational ownership and supportability.
You are autonomous, tenacious and rigorous. Boredom won't be part of your day, but you need to know how to organize yourself to manage the multiple issues underway.
.jpeg)
