DevSecOps Manager

This is a fully remote position, open to applicants in United States.

📋 Description

• Lead and guide the DevSecOps team.

• Develop the roadmap for application security and software supply chain security.

• Promote secure-by-design practices through threat modeling, architecture and design evaluations, reusable security patterns, and engineering guidance focused on developers.

• Standardize trusted, minimal container images and secure base components, incorporating technologies such as Chainguard when applicable.

• Establish controls for software provenance and artifact integrity, including SBOMs, signing, attestations, and verification across build and deployment workflows.

• Integrate automated security measures and policy guardrails into CI/CD and developer workflows.

• Ensure the security of GitHub Actions at scale using reusable hardened workflows, least-privilege permissions, trusted dependencies, and secure authentication practices.

• Collaborate with engineering and platform teams to minimize exploitable vulnerabilities and software supply chain risks.

• Define metrics for the adoption of secure development, integrity of the software supply chain, reduction of vulnerabilities, and effectiveness of controls.

• Assess emerging technologies in application security and software supply chain.

• Convert security strategy into scalable engineering results.

• Perform computer, phone, and typing tasks while sitting for extended periods.

⛳️ Requirements

• Over 5 years of experience in application security, DevSecOps, product security, software security, or a related information security field.

• At least 2 years of experience in people management.

• Proven experience leading technical teams or security engineering projects.

• In-depth knowledge of secure software development, secure-by-design principles, threat modeling, risk-based vulnerability management, and the NIST Secure Software Development Framework (SSDF).

• Practical experience in integrating security controls into CI/CD pipelines and modern software delivery processes.

• Preferred experience in securing GitHub Actions at scale.

• Demonstrated ability to lead change management initiatives related to software delivery, CI/CD platforms, developer workflows, or security controls.

• Familiarity with software supply chain security concepts such as hardened container images, SBOMs, artifact signing, attestations, provenance, and dependency risk.

• Working knowledge of application security testing and automation tools, including SAST, SCA, secrets detection, and related technologies.

• Experience in cloud, SaaS, containerized, and agile/DevOps engineering environments.

• Excellent communication and leadership abilities.

• Capability to sit at a desk or workstation for 7–8 hours a day.

• Proficient in operating computer and phone systems and typing.

• Must be available for work five days a week during specified hours.

• Must work within the U.S.

🏝️ Benefits

• Medical insurance.

• Dental insurance.

• Vision insurance.

• Life insurance.

• Disability insurance.

• 401(k) matching.

• Opportunities for career development.

• Annual bonus.

• Restricted stock unit grant based on individual performance.

• Comprehensive range of benefits.

• Fully remote work from home or location of record within the U.S.