Cloud DevSecOps AI-Enabled Security Manager

PowerToFly; Arizona; On-site; USD 135,000 - 265,000; Full time

Job summary

Deloitte & Touche LLP is seeking a Cyber Cloud Security - DevSecOps Manager to lead complex engagements and shape security strategy across cloud engineering environments. You will translate cybersecurity requirements into practical engineering solutions, working with executives to drive transformation while delivering secure software at velocity.

The role emphasizes AI-enabled security, secure SDLC maturity, and governance, with opportunities to influence strategy, client delivery, and business

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, Engineering, Information Systems, or a related technical discipline
• 6+ years of professional experience in DevSecOps, Application Security, Secure SDLC, Cloud Security, cybersecurity engineering, or cybersecurity consulting
• At least 3 years of progressively responsible experience directly managing teams and demonstrating accountability for staffing, performance management, resource allocation, and budget oversight
• 3+ years of experience leading DevSecOps, Application Security, Secure SDLC, or Secure-by-Design projects or workstreams
• 2+ years of experience with CI/CD and Application Security technologies including SAST, DAST, SCA, secrets scanning, IaC scanning, container security, API security, threat modeling, or vulnerability management
• 2+ years of translating cybersecurity policies into technical security controls or SDLC workflows
• Experience applying at least 2 cybersecurity frameworks such as NIST CSF, NIST SP 800-53, OWASP SAMM, ISO 27001 on client programs
• 1+ year of cloud or cloud-native security experience across Azure, AWS, or GCP
• 1+ year of experience with governance/automation tools like Jira, GitHub, Azure DevOps or similar

Responsibilities

• Lead complex DevSecOps and Secure-by-Design engagements, owning delivery from assessment through roadmap, design, implementation, and operations
• Serve as a trusted advisor and primary client contact with senior stakeholders across Cybersecurity, Engineering, Cloud, and Technology leadership
• Lead DevSecOps and Secure SDLC maturity assessments; identify gaps and develop transformation roadmaps
• Design and implement Secure-by-Design operating models across the application lifecycle
• Lead AI-enabled DevSecOps strategy, integrating AI capabilities into CI/CD for automated security assessments and risk prioritization
• Design and implement AI-assisted vulnerability remediation and integration with existing security workflows
• Establish AI governance, threat modeling, data protection, and metrics to measure automation effectiveness
• Define and optimize security engagement processes including risk classification, assessments, threat modeling, and go-live governance
• Translate security policies and frameworks into actionable engineering controls and automated requirements
• Guide integration of SAST/DAST/SCA, IaC, container, API security into CI/CD pipelines
• Advance software supply chain security including SBOM, code signing, provenance, and artifact integrity
• Improve cloud-native and container security with focus on remediation while maintaining velocity
• Define operating models and governance structures with clear responsibilities and escalation mechanisms
• Establish security metrics and executive dashboards covering cycle time, vulnerability trends, and adoption
• Lead and mentor cross-functional onsite/offshore teams and manage engagements and budgets
• Facilitate executive workshops and support business development through proposals and client pursuits
• Contribute to Deloitte DevSecOps capabilities and accelerators with thought leadership

Skills

DevSecOps

Cloud Security

Application Security

Secure SDLC

CI/CD

Threat Modeling

AI Security

Leadership

Stakeholder Engagement

Education

Bachelor's degree in Computer Science, Cybersecurity, or related field

Tools

Jira

GitHub

Azure DevOps

ServiceNow

Job description

Deloitte & Touche LLP is seeking a Cyber Cloud Security - DevSecOps Manager to lead complex engagements and shape security strategy across cloud engineering environments. You will translate cybersecurity requirements into practical engineering solutions, working with executives to drive transformation while delivering secure software at velocity.

The role emphasizes AI-enabled security, secure SDLC maturity, and governance, with opportunities to influence strategy, client delivery, and business