Job Purpose

The DevSecOps Specialist is responsible for embedding security practices into our DevOps processes, ensuring that security is a primary focus throughout the software development lifecycle. This role will involve close collaboration with development, operations, and security teams to drive a security-first mindset and ensure the protection of our applications, infrastructure, and products.

Essential Duties and Responsibilities

•    Implement the organization's security strategy within the DevOps pipeline, ensuring alignment with overall business objectives.
•    Act as a liaison between the Information Security team and DevOps teams, ensuring that security considerations are embedded into every stage of the software development and deployment process.
•    Assist in the development and execution of incident response plans, focusing on quick detection, mitigation, and resolution of security incidents.
•    Ensure that all DevSecOps practices meet regulatory and compliance requirements (e.g., GDPR, HIPAA, PCI-DSS)
•    Develop and deliver cybersecurity training programs for DevOps teams to promote awareness and adherence to best practices.
•    Evaluate, deploy, and manage security tools and technologies that integrate with the DevOps pipeline, such as SAST, DAST, and container security tools.
•    Keep up to date on emerging threats, incorporating threat intelligence into security practices and providing proactive defenses.
•    Stay up to date on regulatory developments and industry trends.
•    Expected to travel up to 10% each year.
•    Perform other duties as assigned.

Qualifications

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. 

Must be a U.S. citizen or U.S. Permanent Resident (“Green Card holders”) with an active passport.

Education and/or Experience
 

• A degree in a technical field (Computer Science, Information Systems, or Cybersecurity) is preferred but not required.

• Proven experience in securing DevOps environments, integrating security practices into DevOps pipelines and automating security processes required.

• Strong experience with cloud platforms (e.g., AWS, Azure, GCP) and securing cloud-native applications.

• Strong understanding of cybersecurity principles, risk management frameworks, and compliance standards (e.g., SOX, NIST CSF, ISO 27001, SOC-2, HIPAA, GDPR).

• Experience with threat modeling, penetration testing, and secure software development practices.

• Excellent communication and interpersonal skills: Oral, written and listening.

• Strong analytical and problem-solving abilities.

• Ability to work independently and collaboratively in a cross-functional environment.

• Relevant IT certification (e.g., CDP, CISSP, CEH) other relevant certifications is preferred.

Reasoning Ability
•    Problem management / resolution skills; project management skills; generally accepted security principles.
•    Ability to analyze data, resources, and schedules to make decisions that affect a project on a regular basis.

TRAVEL REQUIRED: Up to 10%

PHYSICAL DEMANDS:  This position will work in an office setting, expect minimal physical demands.
 

General Job Requirements