DevSecOps Assessor

Job#: 3046814

Job Description:

Information Security Advisor - DevSecOps & Security Assessments

Position Overview

The Information Security Advisor supports security assessment activities and DevSecOps initiatives by helping organizations build, automate, and improve security controls throughout the software development lifecycle. This role combines hands-on technical implementation with risk advisory responsibilities, partnering closely with technology teams to integrate security into development, deployment, and operational processes.

The ideal candidate brings experience in security assessments, security automation, application security, and risk management, along with the ability to translate technical findings into meaningful business outcomes.

Key Responsibilities

Security Assessments & Risk Management

• Evaluate the effectiveness of security controls through automated data collection, continuous monitoring, and evidence-based assessments.
• Analyze large datasets to identify trends, anomalies, and potential control gaps.
• Support consistent evaluation, documentation, and reporting of security risks across multiple environments.
• Assess technical and operational controls against established security requirements and industry best practices.

DevSecOps & Security Automation

• Implement and maintain application security testing capabilities, including static analysis (SAST), dynamic analysis (DAST), infrastructure-as-code (IaC) scanning, and vulnerability management tools within CI/CD pipelines.
• Develop and integrate APIs and automation workflows to streamline security testing, reporting, and evidence collection.
• Support certificate management and code-signing processes for secure software development and deployment.
• Partner with development and engineering teams to prioritize, remediate, and validate security findings.

Security Advisory & Stakeholder Engagement

• Communicate technical risks and security findings to both technical and non-technical stakeholders.
• Provide guidance on security best practices, risk mitigation strategies, and secure development principles.
• Facilitate discussions that enable informed decision-making related to security, compliance, and technology risk.
• Identify recurring issues and recommend improvements to strengthen the overall security posture.

Process Improvement & Innovation

• Design and enhance security assessment processes through automation, analytics, and emerging technologies.
• Drive efficiency by reducing manual effort and improving visibility into security and compliance activities.
• Contribute to continuous improvement efforts through root cause analysis and process optimization.

Collaboration & Knowledge Sharing

• Serve as a security advisor to engineers, architects, product teams, and other stakeholders.
• Build strong cross-functional partnerships to promote adoption of security best practices.
• Mentor team members and contribute reusable solutions, documentation, and standards.
• Support knowledge sharing and continuous learning across security and engineering communities.

Required Competencies

• Strong understanding of information security principles, risk management practices, and security assessment methodologies.
• Experience working within cloud environments, including AWS and/or Azure.
• Strong analytical and problem-solving skills with the ability to interpret complex technical and business information.
• Effective written and verbal communication skills.
• Ability to influence stakeholders and drive outcomes in a collaborative environment.
• Demonstrated ability to balance technical detail with strategic thinking.

Minimum Qualifications

• Bachelors degree in Information Security, Computer Science, Information Technology, or a related discipline.
• 5+ years of experience in information security, cybersecurity, risk management, audit, compliance, or related fields.
• Experience with security automation, monitoring, compliance, or analytics platforms.
• Relevant industry certifications preferred (e.g., CISSP, CISA, CRISC, Security+, or similar).

Preferred Qualifications

• Experience implementing DevSecOps practices and integrating security into software development lifecycles.
• Background supporting large-scale security testing, vulnerability management, and compliance initiatives.
• Experience administering source code repositories, build systems, and CI/CD platforms.
• Hands-on experience integrating application security and infrastructure security tools into development pipelines.
• Demonstrated ability to collaborate effectively with software engineering, platform, and infrastructure teams.

Technical Skills

Cloud Platforms

• AWS and/or Microsoft Azure
• Cloud security principles and best practices

Development & DevOps Tools

• Source code management and version control systems
• CI/CD platforms and build automation tools
• API development and integration

Security Technologies

• Static Application Security Testing (SAST)
• Dynamic Application Security Testing (DAST)
• Infrastructure-as-Code (IaC) security scanning
• Vulnerability management and compliance tools
• Certificate management and code-signing technologies

Data & Automation

• Security automation frameworks
• Data analysis and reporting tools
• Continuous monitoring and security analytics platforms

Everforth Apex is a world-class IT services company that serves thousands of clients across the globe. When you join Everforth Apex, you become part of a team that values innovation, collaboration, and continuous learning. We offer quality career resources, training, certifications, development opportunities, and a comprehensive benefits package. Our commitment to excellence is reflected in many awards, including ClearlyRateds Best of Staffing in Talent Satisfaction in the United States and Great Place to Work in the United Kingdom and Mexico.

Everforth Apex uses a virtual recruiter as part of the application process. Click here for more details. By applying for this job, you agree to receive calls, AI-generated calls, text messages, or emails from Everforth Apex and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access our privacy policy at https://www.apexsystems.com/privacy-policy

Everforth Apex Benefits Overview: Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our 'Welcome Packet' as well, which an Everforth Apex team member can provide.

Everforth Apex Systems is an equal opportunity employer. We do not discriminate or allow discrimination on the basis of race, color, religion, creed, sex (including pregnancy, childbirth, breastfeeding, or related medical conditions), age, sexual orientation, gender identity, national origin, ancestry, citizenship, genetic information, registered domestic partner status, marital status, disability, status as a crime victim, protected veteran status, political affiliation, union membership, or any other characteristic protected by law. Everforth Apex will consider qualified applicants with criminal histories in a manner consistent with the requirements of applicable law.

If you require an accommodation under the Americans with Disabilities Act to participate in an interview with a virtual recruiter or to use our website for a search or application, please contact our Benefits Department at [email protected] or 804-523-8228. Please note that this contact information is strictly to be used for medical ADA accommodations and that no other inquiries will be answered.

UnitedHealthcare creates and publishes the Transparency in Coverage Machine-Readable Files on behalf of Everforth Apex Systems.

Employee Type:

Contract

Remote:

Yes

Location:

Richmond, VA, US

Job Type:

Date Posted:

August 18, 2026

Pay Range:

$75 - $85 per hour

Similar Jobs

• DevSecOps Engineer
• Security Control Assessor
• Security Controls Assessor
• DevSecOps Engineer
• Senior DevSecOps Engineer