FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in DevSecOps, application security, and security engineering, with a strong focus on security policy definition, CI/CD pipeline security, and cloud security tooling. Proven ability to lead teams, drive security strategy, and ensure compliance with industry standards.
Highest-signal resume keywords
DevSecOps LeadershipCI/CD Pipeline SecurityAWS Services ProvisioningSecurity Policy DefinitionSAST and SCA Tools
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
DevSecOpsApplication SecuritySecurity EngineeringCI/CD Pipeline SecurityGitHub Enterprise CloudTerraformCloudFormationPython ScriptingBash ScriptingIAM Management
Soft Skills
Team LeadershipMentoringStakeholder CommunicationRisk ManagementIncident Response
Tools & Technologies
SonarQubeCheckmarxWizGitHub ActionsArtifact Management ToolsAWS EC2AWS ECSAWS EKSCloudFormation/CDKAI-Assisted Development Tools
Certifications & Qualifications
CISSPCISMAWS Certified Security – SpecialtyAWS Solutions ArchitectAWS DevOps EngineerCKACKAD
Industry Keywords
SOXSOC 2ISO 27001Identity GovernanceLeast PrivilegeRepository Lifecycle ManagementMDMAudit ReadinessCompliance EvidenceSecurity Posture
Tech Stack
Tools & technologiesAWSCloudEC2JavaScriptKubernetesNode.jsPythonSDLCTerraformTypeScript
About the role
Key responsibilities & impact- Own the SDLC security strategy, policy framework and roadmap
- Lead, mentor and grow a team of DevSecOps engineers
- Drive delivery of toolchain hardening programmes
- Report security posture, risk and remediation progress to senior stakeholders
- Partner with platform, SRE, engineering, DevOps/TechOps and InfoSec teams
- Define and implement baseline security policies and automated guardrails across source control and CI/CD
- Integrate, manage and tune SonarQube, Checkmarx, Wiz and related security tools
- Harden build infrastructure and software supply chain controls using artifact management tools
- Provision, secure and optimise AWS services including EC2, ECS/EKS, Lambda, S3, IAM and CloudFormation/CDK
- Lead security architecture reviews and incident response for toolchain security events
- Govern application security and supply chain tooling, exceptions and remediation SLAs
- Triage findings, prioritise vulnerabilities and track remediation to closure
- Establish governance for credentials, secrets and non-human identities
- Define governance for AI-assisted development tools and endpoint security
- Monitor sensitive configuration changes, implement alerting, and own audit readiness and compliance evidence
Requirements
What you’ll need- 8+ years of experience in DevSecOps, application security or security engineering, including leading teams or programmes
- Ability to define security policy and standards, translate them into technical enforcement, and drive adoption across a large organisation
- Strong knowledge of SOX, SOC 2, ISO 27001 and identity governance
- Deep expertise in enterprise-scale CI/CD pipeline security
- Hands-on knowledge of GitHub Enterprise Cloud, GitHub Actions, runners, rulesets and policies
- Strong understanding of repository lifecycle management and Git practices
- Hands-on experience with SAST, SCA, secrets scanning and cloud security tooling
- Knowledge of IAM, SSO, RBAC and least privilege
- Proficiency with Terraform, CloudFormation or CDK
- Experience with AWS compute, networking, storage, IAM and ECS/EKS
- Strong Python or Bash scripting and automation skills; familiarity with TypeScript/Node.js
- Understanding of CMDBs and ITIL-aligned change management
- Awareness of AI tool governance, developer endpoint security and MDM
- Bachelor’s degree or higher in Computer Science, Information Security or a related technology field, or equivalent practical experience
- Preferred experience with GitHub Copilot, Cursor, developer agents/MCP, Backstage, OPA/Sentinel, SLSA, SBOMs and artifact signing
- Security certifications such as CISSP, CISM or AWS Certified Security – Specialty are advantageous
- Cloud or Kubernetes certifications such as AWS Solutions Architect, AWS DevOps Engineer, CKA or CKAD are advantageous
Benefits
Comp & perks- Health care coverage designed for the mind and body
- Generous time off
- Continuous learning resources and career development
- Competitive pay
- Retirement planning
- Continuing education program with company-matched student loan contribution
- Financial wellness programs
- Family benefits for partners and children
- Retail discounts
- Referral incentive awards
- Support for security certifications such as CISSP, CISM and CSSLP
- Innovation projects, training, knowledge sharing