AppSec & DevSecOps Lead: Build Secure, Scalable Software

RXinsider LTD.; Waltham (MA); Hybrid; USD 163,000 - 173,000; Full time

Job summary

Imprivata is seeking an AppSec and DevSecOps Lead to operationalize security across product lines, engineering teams, and infrastructure. The role combines hands-on engineering with leadership to embed security through design, deployment, testing, and retirement in cloud-native and traditional environments.

The successful candidate will support SaaS, on-premises, hybrid, and healthcare security initiatives, collaborating with cross-functional teams and adopting best practices across the software

Qualifications

• Bachelor’s degree in Computer Science, IT, Cybersecurity, Engineering, or equivalent experience.
• Seven+ years in DevOps, cloud, software, application, or infrastructure security, including three+ years in hands-on DevSecOps/security engineering.
• Experience integrating security into CI/CD and development workflows across cloud-native and traditional environments.
• Proficiency with AWS, Azure, or Google Cloud; IaC; containers; Kubernetes; Git; and CI/CD platforms.
• Experience with SAST, DAST, SCA, secrets detection, container security, and SBOMs/provenance.
• Strong scripting or programming skills in Python, Go, JavaScript, Java, Bash.

Responsibilities

• Execute DevSecOps strategy across products, cloud, data centers, and traditional software.
• Establish security-by-design, policy-as-code, and minimum security requirements.
• Embed SAST/DAST/SCA into CI/CD with risk-based gates.
• Secure Git workflows, build systems, credentials, SBOMs, and provenance.
• Apply secure-by-default controls to cloud, networks, identities, APIs, and data.
• Use IaC and policy-as-code to address drift and privileges.

Skills

AppSec

DevSecOps

Cloud security

CI/CD integration

Scripting (Python/Go/JS)

Threat modeling

Communication

Education

Bachelor’s degree

Tools

AWS

Azure

Google Cloud

Kubernetes

IaC (Terraform, CloudFormation)

CI/CD tools (GitHub Actions, GitLab, Jenkins)

Job description

Imprivata is seeking an AppSec and DevSecOps Lead to operationalize security across product lines, engineering teams, and infrastructure. The role combines hands-on engineering with leadership to embed security through design, deployment, testing, and retirement in cloud-native and traditional environments.

The successful candidate will support SaaS, on-premises, hybrid, and healthcare security initiatives, collaborating with cross-functional teams and adopting best practices across the software