FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
DevSecOps Engineer – Information Security
Elevance Health. Develop, recommend, and implement enterprise information security policies, technical standards, guidelines, procedures, and infrastructure elements .
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in developing and implementing enterprise information security policies, integrating DevSecOps practices, and managing vulnerability strategies. Proficient in securing CI/CD pipelines and cloud-native applications while ensuring compliance with security standards.
Highest-signal resume keywords
DevSecOps IntegrationApplication SecurityVulnerability ManagementCloud SecuritySecurity Certifications
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Vulnerability ManagementRisk PrioritizationSecure SDLC PracticesAutomated TestingThreat ModelingSecure Coding StandardsAI Security RisksNetwork Security TechnologiesAccess ManagementSystems Administration
Soft Skills
Technical AdvisoryProblem SolvingCollaborationCommunication
Tools & Technologies
GitHubGitLabJenkinsSnykCheckmarxVeracodeSonarQubeJFrog ArtifactoryWizPrisma Cloud
Certifications & Qualifications
CISSPCCSPCSSLP
Industry Keywords
CI/CD PipelinesCloud SecurityContainersKubernetes SecurityAI-Assisted DevelopmentOWASP Top 10Security Incident ResponseNetwork CommunicationsTelecommunicationsAgile Practices
Tech Stack
Tools & technologiesAWSAzureCloudGoogle Cloud PlatformJenkinsKubernetesSDLC
About the role
Key responsibilities & impact- Develop, recommend, and implement enterprise information security policies, technical standards, guidelines, procedures, and infrastructure elements
- Lead the design and integration of DevSecOps, Application Security, and Vulnerability Management capabilities across the enterprise
- Drive secure-by-design practices across CI/CD pipelines, cloud-native platforms, modern development workflows, and AI-assisted coding environments
- Define and implement secure SDLC practices, including automated testing, threat modeling, and secure coding standards
- Drive vulnerability management strategy, including risk-based prioritization and integration into developer workflows
- Lead development and execution of risk assessment methodologies
- Lead requirements, system architecture, and software design for security products and services
- Lead system and network architecture support for information and network security technologies
- Serve as technical advisor and escalation point for complex security and integration challenges
- Develop security incident response plans and strategies
- Provide troubleshooting and technical escalation for complex problems
- Act as a subject matter expert among peers, managers, and senior management
- Design and implement DevSecOps solutions integrated into GitHub, GitLab, and Jenkins CI/CD pipelines
- Integrate and tune SAST, DAST, SCA, and container-scanning tools
- Own and optimize CNAPP platforms such as Wiz and Prisma Cloud
- Partner with engineering teams to reduce vulnerability backlog and MTTR
- Define KPIs and reporting for security posture, pipeline coverage, and risk reduction
- Establish guardrails for AI-generated code security and mitigate insecure code patterns and data exposure
- Embed security controls into AI-enabled applications and APIs, addressing prompt injection and model misuse
- Create presentations and obtain IT management approval for significant security-system replacements or reconfigurations
Requirements
What you’ll need- Requires BS/BA in information Technology or related field of study and a minimum of 8 years experience in systems administration and security aspects of information systems, access management and network security technologies, network communications, computer networking, telecommunications, systems development and management, hardware, software, data, and people; experience with multiple technical and business disciplines required; or any combination of education and experience, which would provide an equivalent background.
- Vulnerability management and risk prioritization
- Strong knowledge of Application Security (SAST, DAST, SCA, API security) and Cloud Security (AWS, Azure, or GCP), Containers and Kubernetes security
- Experience in DevSecOps (Harness pipelines), Application Security, Cloud Security, or related fields
- Hands-on experience integrating security into CI/CD pipelines at scale
- Experience with CNAPP platforms (e.g., Wiz, Prisma Cloud)
- Experience with tools such as Snyk, Checkmarx, Veracode, SonarQube
- Experience with JFrog Artifactory, Xray, and Curation
- Experience securing AI/LLM-enabled applications or AI-assisted development workflows
- Familiarity with AI security risks (e.g., OWASP Top 10 for LLMs, prompt injection, data leakage)
- Security certifications (e.g., CISSP, CCSP, CSSLP) preferred
- Strong understanding of DevOps and Agile practices
- Candidates must reside within a reasonable commuting distance from a posting location unless an accommodation is granted as required by law
- This position is not eligible for current or future visa sponsorship
Benefits
Comp & perks- Merit increases
- Paid holidays
- Paid Time Off
- Incentive bonus programs
- Medical benefits
- Dental benefits
- Vision benefits
- Short-term disability benefits
- Long-term disability benefits
- 401(k) with match
- Stock purchase plan
- Life insurance
- Wellness programs
- Financial education resources
- Hybrid work flexibility
- Accommodation support for applicants with disabilities