Senior DevSecOps / SSDLC Consultant

Nicoll Curtin; Dublin; Hybrid; EUR 83,000 - 109,000; Full time

Job summary

Nicoll Curtin is partnering with a leading technology organisation to hire a Senior DevSecOps / SSDLC Consultant in Dublin on a hybrid, rolling contract with a daily rate of up to 520 EUR. You will embed security into the SDLC, work with engineering teams to build secure applications at scale, review code for security, and promote secure coding standards.

Strong experience in DevSecOps, App Security and OWASP Top 10 is required.

Qualifications

• 5+ years IT experience including hands-on Application Security / DevSecOps
• Strong understanding of OWASP Top 10 and common vulnerabilities
• Experience with SAST, DAST and vulnerability management tools
• Knowledge of secure software development practices
• Experience in Agile / DevOps environments
• Strong communication and stakeholder management skills

Responsibilities

• Partner with development teams to improve application security practices.
• Perform code security reviews and support remediation activities.
• Drive adoption of secure coding standards and SDLC best practices.
• Support the implementation and use of SAST, DAST and SCA tooling.
• Act as a trusted advisor to engineering teams on security-related matters.
• Promote a security-first culture through developer engagement and security champion initiatives.

Skills

DevSecOps

App Security

OWASP Top 10

Secure Coding

Agile/DevOps

Stakeholder Mgmt

Tools

SAST

DAST

SCA

Job description

Dublin (Hybrid) / Rolling contract / Up to 520 eur daily rate

Stamp 4 / EU passport only

We're partnering with a leading technology organisation to hire a Senior DevSecOps / SSDLC Consultant to help embed security into the software development lifecycle and work closely with engineering teams to build secure applications at scale.

This role sits within a mature Application Security function and would suit someone coming from either a software engineering background who has moved into security, or an application security professional with strong technical and coding capabilities.

What you'll be doing

• Partnering with development teams to improve application security practices.
• Performing code security reviews and supporting remediation activities.
• Driving adoption of secure coding standards and SDLC best practices.
• Supporting the implementation and use of SAST, DAST and SCA tooling.
• Acting as a trusted advisor to engineering teams on security-related matters.
• Promoting a security-first culture through developer engagement and security champion initiatives.

We're interested in speaking with candidates from either of the following backgrounds:

• Software Engineers, Developers or DevOps Engineers who have developed a strong interest in application security, secure coding and DevSecOps practices.
• Application Security, Product Security or Cyber Security professionals who are comfortable reviewing, understanding and discussing code with development teams.

What we're looking for

• 5+ years of IT experience, including hands-on experience in Application Security, DevSecOps, Software Engineering or a related field.
• Strong understanding of OWASP Top 10 and common application security vulnerabilities.
• Experience with SAST, DAST and vulnerability management tools.
• Knowledge of secure software development practices.
• Experience working within Agile, DevOps or DevSecOps environments.
• Strong communication and stakeholder management skills.

If you're passionate about helping organisations build secure software and enjoy working at the intersection of development and security, we'd love to hear from you.