Job Description
Key Responsibilities:- Establish and manage a comprehensive vulnerability management program, including:
- Integration of scanning tools across source code, dependencies, containers, and infrastructure.
- Continuous discovery, prioritization, and tracking of vulnerabilities.
- Coordinating with development and infrastructure teams for timely remediation.
- Root cause analysis and reporting on trends and recurring issues.
- Lead the design and implementation of secure, automated CI/CD pipelines.
- Define and drive DevSecOps strategy in alignment with business goals and compliance standards.
- Embed security controls and tooling (SAST, DAST, SCA, IaC scanning, etc.) into the software development lifecycle.
- Collaborate closely with engineering, platform, and security teams to ensure scalable security architecture.
- Automate security testing and compliance checks within CI/CD workflows.
- Evaluate and implement security tools and platforms that support proactive risk management.
- Drive secure configuration management and enforcement through IaC and policy-as-code.
- Maintain awareness of emerging threats, vulnerabilities, and regulatory changes.
- Support internal and external audits, ensuring alignment with compliance frameworks (e.G., ISO 27001, SOC 2, GDPR).
- Provide technical mentoring and guidance on secure coding, cloud security, and DevSecOps best practices.
Required Skills & Experience:- 5+ years of hands-on experience in DevOps, Security Engineering, or DevSecOps.
- Strong experience designing and managing vulnerability management workflows, ideally across multi-cloud and containerized environments.
- Familiarity with vulnerability scanning tools and platforms (e.G., Snyk, Tenable, Qualys, Trivy, Clair, etc.).
- Proficient in implementing CI/CD pipelines with tools such as GitLab CI, GitHub Actions, Jenkins, CircleCI.
- Deep understanding of cloud platforms (AWS, Azure, or GCP) and cloud-native security controls.
- Expertise in scripting (e.G., Python, Bash) and infrastructure-as-code (Terraform, Ansible).
- In-depth knowledge of application and infrastructure security, secure SDLC, and DevSecOps tooling.
- Strong knowledge of compliance and security frameworks: OWASP, NIST, CIS Benchmarks, ISO 27001.
- Excellent communication skills and ability to work across technical and non-technical stakeholders.
- Proven ability to lead cross-functional security initiatives and mentor engineers.
Want to know if you’re a fit?
Upload your resume and let our AI show you.
Skills
Amazon Web Services (AWS)unmatched
Ansibleunmatched
Applications Securityunmatched
Bash Scriptingunmatched
Benchmarkingunmatched
Best Practicesunmatched
Cloud Computingunmatched
Communication Skillsunmatched
Computer Securityunmatched
Configuration Managementunmatched
Continuous Deployment/Deliveryunmatched
Continuous Integrationunmatched
Cross-Functionalunmatched
DevOpsunmatched
Establish Prioritiesunmatched
External Auditunmatched
GCP (Good Clinical Practices)unmatched
GitHubunmatched
ISO (International Organization for Standardization)unmatched
Internal Auditunmatched
Jenkinsunmatched
Leadershipunmatched
Machine Toolunmatched
Maintain Complianceunmatched
Mentoringunmatched
Microsoft Windows Azureunmatched
Python Programming/Scripting Languageunmatched
Regulationsunmatched
Regulatory Complianceunmatched
Risk Managementunmatched
Root Cause Analysisunmatched
Scripting (Scripting Languages)unmatched
Secure Codingunmatched
Security Architectureunmatched
Security Complianceunmatched
Security Infrastructureunmatched
Software Development Lifecycle (SDLC)unmatched
Test Automationunmatched
Time Managementunmatched
Trend Analysisunmatched
U.S. National Institute of Standards and Technology (NIST)unmatched
Vulnerability Scannersunmatched
Level up your application
Browse dozens of recruiter approved resume templates, layouts and formats. Choose your favorite and make it your own in minutes.
Free resume templatesImprove your existing resume or start from scratch and create a standout, ATS-friendly resume. Add job-specific content, download and apply.
Free resume builder