Skip to main content

About the role

Key Responsibilities: Design and implement DevSecOps frameworks integrating security into CI/CD pipelines. Define and enforce application security controls including: SAST (Static Application Security Testing) DAST (Dynamic Application Security Testing) SCA (Software Composition Analysis) Architect solutions for software supply chain security, including: Dependency scanning SBOM (Software Bill of Materials) management Vulnerability remediation workflows Integrate security tools with build systems, container registries, and orchestration platforms. Collaborate with development, operations, and security teams to embed security early in SDLC. Define risk-based prioritization and remediation strategies for vulnerabilities. Drive automation of security checks to reduce manual overhead and improve release velocity. Ensure compliance with industry standards (e.g., OWASP, NIST, CIS benchmarks).Provide technical leadership and guidance onemerging DevSecOps trends and best practices.
Required Skills: Strong expertise in CI/CD tools (Jenkins, GitHub Actions, GitLab CI, Azure DevOps). Hands-on experience with SAST, DAST, SCA tools (e.g., SonarQube, Checkmarx, Veracode, Snyk). Knowledge of container security (Docker, Kubernetes) and cloud-native security. Familiarity with SBOM standards (CycloneDX, SPDX) and supply chain risk mitigation. Proficiency in secure coding principles and threat modeling. Experience with automation scripting (Python, Bash) and Infrastructure as Code (Terraform, Ansible Strong understanding of compliance frameworks and regulatory requirements. Preferred Qualifications .Certifications: CSSLP, CKA, AWS/Azure Security Specialty. Experience in microservices architecture and API security. We are an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, national origin, citizenship/ immigration status, veteran status, or any other status protected under federal, state, or local law.

Before you apply

Applying takes about a minute. These four things decide how fast it moves after that.

Your profile is current

It's what we read first. Occupations, seniority and locations matter more than a long history.

Two examples you can talk through

Not a portfolio — just two pieces of work where you can explain the decisions and what you'd change.

A number in mind

What you're on now and what would make you move. We negotiate better when we know both.

Your notice period

Employers plan around it, and it's the question that stalls offers most often.

Once you apply, someone reads it and calls you before anything reaches the employer — usually within two working days.

More like this