Stefanini, Inc logo

DevSecOps Security Advisor

Stefanini, Inc
  • Richmond, VA
  • Remote
    2 days ago

    Job Description

    Stefanini Group is hiring!
    Stefanini is looking for DevSecOps Security Advisor-Remote
    For quick apply, please contact Sudhanshu Shrivastava; Ph: 248 582 6510
    Sudhanshu.shrivastava@stefanini.com
     
    W2 Candidates Only
     
    Position Overview:
    As a DevSecOps Assessment Information Security Advisor, where you'll drive the evolution of continuous assurance and modern security practices. This blended role combines advanced security assessment, DevSecOps enablement, and strategic advisory to shape secure-by-design pipelines and platforms. You'll partner with engineering teams, automate evidence and reporting workflows, and deliver actionable risk insights to leadership. 
     
    Key Responsibilities:
    • Lead activities to embed secure-by-design practices across DevSecOps pipelines. 
    • Assess automation opportunities, build and integrate security automation, and deliver data-driven risk insights. 
    • Design, build, and operationalize AI agents for evidence triage, control mapping, and developer support. 
    • Enforce secure prompt and skill management, role-based access controls, and audit trails. 
    • Integrate agents with enterprise systems (ticketing, CI/CD, knowledge bases) via secure APIs. 
    • Map automated controls and agent workflows to priority NIST SP 800-53 Rev 5 and FedRAMP requirements. 
    • Deliver FedRAMP-ready artifacts and processes, including continuous monitoring and compliance dashboards. 
    • Partner with engineering to implement SAST/DAST, infrastructure-as-code checks, and vulnerability scanning within CI/CD. 
    • Develop APIs to orchestrate security scanning workflows and automate evidence capture. 
    • Manage private certificate authorities and automate code signing for secure build and release processes. 
    • Translate technical findings into decision-ready insights for leadership and risk committees. 
    • Co-design automated, analytics-driven processes to reduce manual effort and enhance transparency. 
    • Mentor peers, promote reusable code libraries, and propagate best practices across the DevSecOps community. 


    Required Qualifications:
    • Bachelor's degree in Information Security, Computer Science, or a related field. 
    • 5-7 years of experience in information security, risk management, audit, or cyber operations. 
    • Advanced knowledge of security principles, assessment methodologies, and cloud environments (AWS/Azure). 
    • Hands-on experience with automation platforms, continuous monitoring tools, and analytics technologies. 
    • Strong analytical, communication, facilitation, and negotiation skills. 
     
    Preferred:
    • Professional certifications (CISSP, CISA, CRISC). 
    • Demonstrated success enabling DevSecOps at scale, including security testing automation and policy development. 
    • Experience administering code repositories and build systems across CI/CD pipelines. 
    • Experience building and deploying AI agents (RAG, orchestration, tool/function calling) in regulated environments. 
    • Direct experience with NIST SP 800-53 Rev 5 and FedRAMP, including OSCAL artifact management and GRC ingestion. 
     
    Technical Proficiencies:
    • AWS and Azure cloud platforms. 
    • Source control and developer platforms. 
    • Vulnerability, compliance, and quality scanning tools. 
    • SAST/DAST and infrastructure-as-code tooling. 
     
    Performance Indicators:
    • Achieve at least a 30% reduction in manual evidence preparation through automation and AI assistants. 
    • Decrease assessment cycle time by 25% while maintaining audit quality. 
    • Deploy production-ready AI agents with 90% accuracy on scoped tasks and measurable deflection of routine queries. 
    • Operationalize FedRAMP 20X OSCAL ingestion with auditable traceability to GRC dashboards.
     
    #LI-SS3
    #LI-REMOTE
     
    Stefanini takes pride in hiring top talent and developing relationships with our future employees. Our talent acquisition teams will never make an offer of employment without having a phone conversation with you. Those face-to-face conversations will involve a description of the job for which you have applied. We also speak with you about the process including interviews and job offers.
     
    About Stefanini Group:
    The Stefanini Group is a global provider of offshore, onshore and near shore outsourcing, IT digital consulting, systems integration, application, and strategic staffing services to Fortune 1000 enterprises around the world. Our presence is in countries like the Americas, Europe, Africa, and Asia, and more than four hundred clients across a broad spectrum of markets, including financial services, manufacturing, telecommunications, chemical services, technology, public sector, and utilities. Stefanini is a CMM level 5, IT consulting company with a global presence. We are CMM Level 5 company

    Numbers & Facts

    LocationRichmond, VA (
    Remote
    )
    IndustryComputer/IT Services
    Company Size10,000 employees or more
    Year Founded1987
    Websitehttp://www.stefanini.com

    About Company

    Stefanini is a global IT services company with over 24,000 employees across 77 offices in 40 countries across the Americas, Europe, Africa, Australia, and Asia. Since 1987, Stefanini has been providing offshore, onshore and nearshore IT services, including application development and outsourcing services, IT infrastructure outsourcing (help desk support and desktop services), systems integration, consulting and strategic staffing to Fortune 1000 enterprises around the world.

    With a base of over 500 active clients, including more than 300 multinationals, Stefanini maintains a strong presence in industries such as financial services, manufacturing, telecommunications, chemical, services, technology, public sector, and utilities. Clients benefit from Stefanini's financial stability, sustained year-over-year growth, and zero net debt. The corporate global headquarters is located in Sao Paulo, Brazil with European headquarters in Brussels and North American headquarters in metropolitan Detroit.

    Skills

    • Access Controlunmatched
    • Amazon Web Services (AWS)unmatched
    • Analysis Skillsunmatched
    • Application Integrationunmatched
    • Application Programming Interface (API)unmatched
    • Artificial Intelligence (AI)unmatched
    • Artificial Intelligence (AI) Agentsunmatched
    • Auditingunmatched
    • Automationunmatched
    • CISA - Certified Information Systems Auditorunmatched
    • CISSP - Certified Information Systems Security Professionalunmatched
    • Capability Maturity Model (CMM)unmatched
    • Certificate Authoritiesunmatched
    • Cloud Computingunmatched
    • Communication Skillsunmatched
    • Computer Scienceunmatched
    • Consultingunmatched
    • Continuous Deployment/Deliveryunmatched
    • Continuous Integrationunmatched
    • Digital Certificatesunmatched
    • Financial Servicesunmatched
    • Fortune 1000 Customersunmatched
    • Governmentunmatched
    • Information Technology & Information Systemsunmatched
    • Information Technology Consultingunmatched
    • Information Technology Outsourcingunmatched
    • Information/Data Security (InfoSec)unmatched
    • Knowledge Baseunmatched
    • Leadershipunmatched
    • Machine Toolunmatched
    • Maintain Complianceunmatched
    • Manufacturingunmatched
    • Microsoft Windows Azureunmatched
    • Nearshoringunmatched
    • Negotiation Skillsunmatched
    • Policy Developmentunmatched
    • Quality Managementunmatched
    • Recruiting Strategyunmatched
    • Release Management/Engineeringunmatched
    • Reporting Dashboardsunmatched
    • Riskunmatched
    • Risk Managementunmatched
    • Security Analysisunmatched
    • Source Code/Configuration Management (SCM)unmatched
    • System Integration (SI)unmatched
    • Telecommunicationsunmatched
    • Test Automationunmatched
    • Traceabilityunmatched
    • U.S. National Institute of Standards and Technology (NIST)unmatched
    • Vulnerability Scannersunmatched

    Level up your application

    Professional resume templates

    Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.

    Free resume templates

    Resume Builder

    Improve your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.

    Resume Builder