DevSecOps Specialist
Core
Design, implement, and manage SAST/SCA security scanning capabilities across GitLab SaaS and On-Prem environments to secure the SDLC.
Role type
Senior DevSecOps Specialist (SAST/SCA focus)
Builds
Secure CI/CD pipelines and vulnerability management workflows for GitLab platforms
Domain
Application Security / DevSecOps / Software Engineering
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
SAST/SCA tooling expertise, GitLab native security scanning, CI/CD pipeline engineering, vulnerability scoring/prioritization, secure design fundamentals, root-cause analysis, technical documentation, developer training
Preferred skills
Third-party SAST/SCA tool evaluation, large-scale multi-repo rollout experience, handover documentation structuring, Telco/critical-infrastructure security experience
Technologies
GitLab (SaaS & Self-Managed), .gitlab-ci.yml, SAST/SCA/DAST tools, GRC tooling
Responsibilities
Assess SDLC and CI/CD pipeline architecture, define target-state SAST/SCA architecture, set scanning policies and severity thresholds, design vulnerability triage workflows, review secure coding standards, provide technical sign-off on rollout readiness, run secure coding training, build internal documentation for self-service remediation
Seniority
Senior, 8–12+ years experience
