DevSecOps SME - Contract
Core
Design, implement, and roll-out application security scanning standards across enterprise engineering pipelines, focusing on SAST, SCA, and DAST platforms.
Role type
Senior DevSecOps Engineer (Contract)
Builds
Enterprise security scanning platforms integrated into CI/CD pipelines
Domain
Software Engineering / Application Security
Deliverable
production ML models | product features | infrastructure
Required skills
SAST/SCA/DAST platform implementation, CI/CD pipeline automation, vulnerability management, scripting (Python/Bash/PowerShell), API integration
Preferred skills
None stated
Technologies
Checkmarx, SonarQube, Veracode, Snyk, Fortify, OWASP ZAP, GitLab CI, GitHub Actions, Azure DevOps, Jenkins
Responsibilities
Lead end-to-end configuration and deployment of code scanning platforms; Establish baseline rulesets and enforcement mechanisms for SAST, SCA, and DAST; Embed automated security testing stages and quality gates into CI/CD pipelines; Define operational scope of security scanning and optimize rulesets; Work with engineering squads to provide guided remediation and establish secure coding standards
Seniority
Senior, hands-on IC