Position overviewPosted 2 weeks ago
Department Manager - DevSecOps Security
CP Axtra (Makro PRO) →full-time5+ years
Bangkok, Thailand
Compensation
THB 120,000 - THB 180,000
THB / month
Estimated range. Confirm compensation with the employer.
Current listing check
We check listings for employer identity, role clarity, and application links before publishing.
Listing record updated: October 9, 2026. We archive records after 60 days without an update. This date does not confirm that the employer is still hiring.
AI Resume Fit Analysis
Quick viewWondering if your experience matches this role? Upload your CV to see matched skills, a fit score, and areas to develop.
About the position
This role manages the day-to-day operations and continuous improvement of CP Axtra's security testing platforms, including Checkmarx, SonarQube, Qualys WAS, OWASP ZAP, and Spectral. The manager ensures these tools are integrated into every CI/CD pipeline to provide high signal and low noise. Responsibilities include tuning scan policies, onboarding new repositories, troubleshooting pipeline integrations, and training developers. The role also extends coverage into container security and infrastructure-as-code scanning as the company's cloud-native footprint grows. Success is defined by developers trusting the tools and acting on actionable findings.
The position requires owning execution alongside the Application Security Lead. Key duties involve tuning scan policies, onboarding new repositories, troubleshooting pipeline integrations, and training developers on interpreting results. The manager must continuously reduce false positive rates and extend coverage into container security and infrastructure-as-code scanning. The role focuses on making security tools genuinely useful and seamlessly integrated into development workflows.
Responsibilities
Manage day-to-day operations and continuous improvement of security testing platforms
Tune scan policies and reduce false positive rates
Onboard new repositories and troubleshoot pipeline integrations
Train developers on interpreting security results
Extend coverage into container security and infrastructure-as-code scanning
Ensure tools are integrated into every CI/CD pipeline
Requirements
5+ years of experience managing DevSecOps or application security testing platforms in a production environment
Hands-on expertise with at least 2 of: Checkmarx, SonarQube, Snyk, Veracode, or Fortify
Experience integrating security scanning into CI/CD pipelines
Strong understanding of DAST tools and web application scanning
Ability to tune scan policies and write custom rules
Working knowledge of container security scanning and IaC scanning
Clear communication skills for working with developers
Nice to have
Experience with Spectral or other secrets detection platforms
Background in software development
Familiarity with SonarQube quality profiles and custom rule development
Experience managing scanning platforms at scale
Knowledge of supply chain security: SBOM generation, dependency confusion prevention, provenance verification
CDE, CSSLP, or equivalent certification
Hiring Process
Unknown
Share this job
Job listings are sourced from company websites and career pages. Learn more about how we source jobs.
Bangkok Jobs is not affiliated with the hiring companies. Please verify all job details directly with the employer before applying. We are not responsible for the accuracy of job postings or hiring decisions.