DevSecOps Assessor

Position Overview

The Information Security Advisor supports security assessment activities and DevSecOps initiatives by helping organizations build, automate, and improve security controls throughout the software development lifecycle. This role combines hands-on technical implementation with risk advisory responsibilities, partnering closely with technology teams to integrate security into development, deployment, and operational processes. The ideal candidate brings experience in security assessments, security automation, application security, and risk management, along with the ability to translate technical findings into meaningful business outcomes.

Responsibilities

• Security Assessments & Risk Management
  • Evaluate the effectiveness of security controls through automated data collection, continuous monitoring, and evidence-based assessments.
  • Analyze large datasets to identify trends, anomalies, and potential control gaps.
  • Support consistent evaluation, documentation, and reporting of security risks across multiple environments.
  • Assess technical and operational controls against established security requirements and industry best practices.
• DevSecOps & Security Automation
  • Implement and maintain application security testing capabilities, including static analysis (SAST), dynamic analysis (DAST), infrastructure-as-code (IaC) scanning, and vulnerability management tools within CI/CD pipelines.
  • Develop and integrate APIs and automation workflows to streamline security testing, reporting, and evidence collection.
  • Support certificate management and code-signing processes for secure software development and deployment.
  • Partner with development and engineering teams to prioritize, remediate, and validate security findings.
• Security Advisory & Stakeholder Engagement
  • Communicate technical risks and security findings to both technical and non-technical stakeholders.
  • Provide guidance on security best practices, risk mitigation strategies, and secure development principles.
  • Facilitate discussions that enable informed decision-making related to security, compliance, and technology risk.
  • Identify recurring issues and recommend improvements to strengthen the overall security posture.
• Process Improvement & Innovation
  • Design and enhance security assessment processes through automation, analytics, and emerging technologies.
  • Drive efficiency by reducing manual effort and improving visibility into security and compliance activities.
  • Contribute to continuous improvement efforts through root cause analysis and process optimization.
• Collaboration & Knowledge Sharing
  • Serve as a security advisor to engineers, architects, product teams, and other stakeholders.
  • Build strong cross-functional partnerships to promote adoption of security best practices.
  • Mentor team members and contribute reusable solutions, documentation, and standards.
  • Support knowledge sharing and continuous learning across security and engineering communities.

Requirements

• Strong understanding of information security principles, risk management practices, and security assessment methodologies.
• Experience working within cloud environments, including AWS and/or Azure.
• Strong analytical and problem-solving skills with the ability to interpret complex technical and business information.
• Effective written and verbal communication skills.
• Ability to influence stakeholders and drive outcomes in a collaborative environment.
• Demonstrated ability to balance technical detail with strategic thinking.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or a related discipline.
• 5+ years of experience in information security, cybersecurity, risk management, audit, compliance, or related fields.
• Experience with security automation, monitoring, compliance, or analytics platforms.
• Relevant industry certifications preferred (e.g., CISSP, CISA, CRISC, Security+, or similar).

Preferred Qualifications

• Experience implementing DevSecOps practices and integrating security into software development lifecycles.
• Background supporting large-scale security testing, vulnerability management, and compliance initiatives.
• Experience administering source code repositories, build systems, and CI/CD platforms.
• Hands-on experience integrating application security and infrastructure security tools into development pipelines.
• Demonstrated ability to collaborate effectively with software engineering, platform, and infrastructure teams.

Skills

• Cloud Platforms
  • AWS and/or Microsoft Azure
  • Cloud security principles and best practices
• Development & DevOps Tools
  • Source code management and version control systems
  • CI/CD platforms and build automation tools
  • API development and integration
• Security Technologies
  • Static Application Security Testing (SAST)
  • Dynamic Application Security Testing (DAST)
  • Infrastructure-as-Code (IaC) security scanning
  • Vulnerability management and compliance tools
  • Certificate management and code-signing technologies
• Data & Automation
  • Security automation frameworks
  • Data analysis and reporting tools
  • Continuous monitoring and security analytics platforms

Benefits

• Supplemental benefits including medical, dental, vision, life, and disability insurance plans.
• Employee Stock Purchase Program (ESPP) and 401K program with company match after 12 months of tenure.
• Health Savings Account (HSA) on the HDHP plan.
• SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions.
• Corporate discount savings program and other discounts.
• On-demand training program, access to certification prep, and a library of technical and leadership courses/books/seminars after 6+ months of tenure.
• Certification discounts and perks to associations including CompTIA and IIBA.
• Dedicated customer service team and certified Career Coach.