FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in DevSecOps practices, including CI/CD security gate implementation and vulnerability management at scale. Proficient in producing actionable reporting for non-technical stakeholders and leading cross-functional teams in cloud and infrastructure security.
Highest-signal resume keywords
DevSecOps ExperienceCI/CD Security GatesVulnerability ManagementRisk-Based PrioritizationCloud Security Leadership
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Vulnerability ManagementRisk-Based PrioritizationCI/CD Security GatesSASTSoftware Composition AnalysisContainer SecurityInfrastructure-as-Code ScanningReportingBranch Hygiene RulesRepository Hygiene Rules
Soft Skills
CommunicationLeadershipCollaboration
Tools & Technologies
GitHub ActionsJenkinsArgoCDHelmAWS CodePipelineDefectDojoPower BIDatadogAzure DevOpsKubernetes
Industry Keywords
DevOpsDevSecOpsVulnerability ManagementRisk AssessmentSupply Chain Security
Tech Stack
Tools & technologiesAWSAzureCloudGroovyJenkinsKubernetes
About the role
Key responsibilities & impact- Map the pipelines (GitHub Actions, Jenkins with Groovy, ArgoCD and Helm, AWS CodePipeline) and the scanners currently in use
- Build one triage process that pulls scanner output together, removes duplicates, ranks by real risk (CVSS, EPSS, CISA KEV, reachability) and tracks each item to fixed, contained or risk-accepted with a named owner
- Add SAST, software composition analysis, secrets, container and infrastructure-as-code scanning to the pipelines, gated so fixed issues stay fixed
- Set branch and repository hygiene rules
- Produce weekly progress reporting for the CISO
- In phase 2, lead the cloud and infrastructure engineers and the vulnerability management analyst inside DevOps team
Requirements
What you’ll need- Around 6 years in DevOps or platform engineering, with solid DevSecOps experience
- Has built CI/CD security gates on GitHub Actions or Jenkins
- Vulnerability management at scale, including risk-based prioritisation
- Can turn findings data into reporting a non-technical leader trusts
- Helpful: An aggregation tool such as DefectDojo
- Helpful: Container and Kubernetes security
- Helpful: SBOM generation and supply chain security (SLSA, Sigstore)
- Helpful: Azure DevOps or AWS CodePipeline
- Helpful: Building dashboards in Power BI or Datadog