DevSecOps SME - Contract

Job summary

The DevSecOps SME role focuses on the design, implementation, and roll-out of application security scanning standards within enterprise engineering pipelines. Responsibilities include leading the deployment of code scanning platforms such as Checkmarx and SonarQube, establishing governance for SAST, SCA, and DAST, and automating security testing in CI/CD pipelines like GitLab CI and Azure DevOps.

Qualifications

• Experience building, configuring, and deploying enterprise SAST, SCA, and DAST tooling
• Hands-on experience integrating application security testing into automated CI/CD pipelines
• Understanding of the OWASP Top 10, CWE, open-source license risk, and dependency vulnerability management
• Proficiency in scripting (Python, Bash, or PowerShell) and working with APIs for automation

Responsibilities

• Lead the configuration, deployment, and integration of code scanning platforms
• Establish rulesets, policy standards, and enforcement mechanisms for SAST, SCA, and DAST
• Embed automated security testing stages and quality gates into CI/CD pipelines
• Define the operational scope of security scanning and optimize rulesets
• Work with software engineering squads to provide guided remediation and establish secure coding standards

Skills

Relocation