DevSecOps Manager

Paylocity

. Lead and mentor the DevSecOps team .

Posted 10/20/2026full-timeRemote • United StatesMid-LevelSenior💰 $131,000 - $187,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in application security and software supply chain security, with a strong focus on secure software development practices, threat modeling, and CI/CD integration. Proven leadership in managing technical teams and driving security initiatives to reduce vulnerabilities and enhance software integrity.

Highest-signal resume keywords

Application SecurityDevSecOps LeadershipSecure Software DevelopmentCI/CD IntegrationSoftware Supply Chain Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Threat ModelingRisk-Based Vulnerability ManagementNIST Secure Software Development FrameworkSecurity Controls IntegrationApplication Security TestingSASTSCASecrets DetectionHardened Container ImagesSBOMs

Soft Skills

Strong CommunicationLeadership Skills

Tools & Technologies

GitHub ActionsCI/CD PipelinesCloud EnvironmentsSaaSContainerized EnvironmentsAgile/DevOps

Industry Keywords

Software Supply Chain RiskArtifact SigningAttestationsProvenanceDependency Risk

Tech Stack

Tools & technologies

Cloud

About the role

Key responsibilities & impact

Lead and mentor the DevSecOps team
Define the roadmap for application security and software supply chain security
Drive secure-by-design practices through threat modeling, architecture and design reviews, reusable security patterns, and developer-focused engineering guidance
Standardize trusted, minimal container images and secure base components, including adoption of technologies such as Chainguard where appropriate
Establish software provenance and artifact integrity controls, including SBOMs, signing, attestations, and verification throughout build and deployment workflows
Embed automated security controls and policy guardrails into CI/CD and developer workflows
Secure GitHub Actions at scale through reusable hardened workflows, least-privilege permissions, trusted dependencies, and secure authentication patterns
Partner with engineering and platform teams to reduce exploitable vulnerabilities and software supply chain risk
Define metrics for secure-development adoption, software supply chain integrity, vulnerability reduction, and control effectiveness
Evaluate emerging application security and software supply chain technologies
Translate security strategy into scalable engineering outcomes
Perform computer, phone, and typing work while sitting for extended periods

Requirements

What you’ll need

5+ years of experience in application security, DevSecOps, product security, software security, or a related information security discipline
2+ years of people management experience
Experience leading technical teams or security engineering initiatives
Strong knowledge of secure software development, secure-by-design principles, threat modeling, risk-based vulnerability management, and the NIST Secure Software Development Framework (SSDF)
Hands-on experience integrating security controls into CI/CD pipelines and modern software delivery workflows
Experience securing GitHub Actions at scale is preferred
Demonstrated experience leading change management efforts related to software delivery, CI/CD platforms, developer workflows, or security controls
Experience with software supply chain security concepts including hardened container images, SBOMs, artifact signing, attestations, provenance, and dependency risk
Working knowledge of application security testing and automation, including SAST, SCA, secrets detection, and related technologies
Experience working in cloud, SaaS, containerized, and agile/DevOps engineering environments
Strong communication and leadership skills
Ability to sit at a desk or workstation for 7–8 hours a day
Ability to operate computer and phone systems and type
Must be available five days per week during designated work hours
Must work within the U.S.

Benefits

Comp & perks

Medical insurance
Dental insurance
Vision insurance
Life insurance
Disability insurance
401(k) match
Career development opportunities
Annual bonus
Restricted stock unit grant based on individual performance
Full range of benefits
Fully remote work from home or location of record within the U.S.