DevSecOps SME - Contract

Job summary

The Lead DevSecOps & AI Security Specialist role focuses on bridging business analysis, security architecture, and application security tooling within enterprise software delivery pipelines. Key responsibilities include implementing code scanning platforms, defining security testing standards within CI/CD pipelines, and leveraging AI for governance and policy enforcement, utilizing tools such as Checkmarx, SonarQube, and Veracode.

Qualifications

• Proven track record of implementing enterprise SAST, SCA, and DAST tooling
• Experience leveraging AI/LLM technologies for DevSecOps governance
• Strong background in writing technical requirements and defining security standards
• Experience embedding automated security scanning in CI/CD systems
• Excellent communication skills to influence engineering culture and drive adoption

Responsibilities

• Lead implementation and integration of code scanning platforms
• Define and enforce SAST, SCA, and DAST scanning standards in CI/CD pipelines
• Establish scanning rulesets, triage workflows, and vulnerability remediation SLAs
• Implement DevSecOps governance frameworks using AI capabilities
• Establish automated policy enforcement and AI-assisted code remediation
• Define standards for secure AI deployment and data privacy governance
• Translate application security requirements into actionable user stories
• Collaborate with software engineers and security architects to embed security in SDLC
• Develop operational runbooks and metrics dashboards for security posture monitoring

Skills

Relocation