Secure SDLC Architect: DevSecOps

Quick Facts

Security Architect focused on strengthening the Secure Software Development Lifecycle (S-SDLC).

Description

Join the Product Security team to integrate security practices into the development lifecycle and address vulnerabilities before production. Collaborate with product, engineering, and infosec teams to strengthen the S-SDLC at global scale through threat modeling, triaging security findings, triage agents, and remediation guidance within CI/CD workflows.

Responsibilities

• Integrate security practices into the SSDLC across multiple product teams
• Perform threat modeling, design reviews, and secure code reviews
• Triaging and prioritizing findings from SAST, DAST, SCA, secrets scanning, and container security tools
• Create, run, and improve agentic AI for triaging findings and remediation efforts
• Partner with developers and DevOps engineers to guide remediation and validate fixes
• Create and maintain security standards, developer guidelines, and policies
• Drive integration of security tools into CI/CD pipelines and build workflows

Requirements

• Hands-on Product/Application Security experience
• Proven expertise in SSDLC, secure design, and secure coding practices
• Hands-on with SAST, DAST, SCA, IAST, and container security tools
• Expertise in secure AI implementation during software creation, developing and deploying agentic AI solutions for addressing security findings
• Working experience with GitHub/GitLab/Bitbucket, Jira/ServiceNow, and CI/CD pipelines
• Understand cloud-native environments, Docker, and Kubernetes
• Communicate clearly across engineering, product, and infosec teams

Benefits

• FlexBase: work from home, office, or combination based on what best supports your work