DevSecOps Architect: Secure CI/CD & Supply Chain

Quantum Technologies. LLC; Texas; On-site; USD 120,000 - 190,000; Full time

Job summary

Quantum Technologies. LLC is seeking a Senior DevSecOps Lead to design and implement security-enabled CI/CD pipelines across our software platforms. You’ll integrate SAST/DAST/SCA tooling, secure coding practices, and threat modeling to reduce risk while speeding releases.

You will architect secure software supply chain processes, manage SBOMs (CycloneDX/SPDX), and drive automation with IaC and container security in cloud-native environments.

Qualifications

• Experience designing DevSecOps in CI/CD pipelines.
• Hands-on experience with SAST/DAST/SCA tools.
• Knowledge of container security and cloud-native security.
• Familiarity with SBOM standards (CycloneDX, SPDX).
• Proficiency in secure coding principles and threat modeling.

Responsibilities

• Design and implement DevSecOps frameworks in CI/CD pipelines.
• Define and enforce application security controls (SAST/DAST/SCA).
• Architect solutions for software supply chain security (SBOM, dependency scanning).
• Integrate security tools with build systems, registries, and orchestration platforms.

Skills

CI/CD Tools

SAST/DAST/SCA

Container Security

SBOM Standards

Secure Coding & Threat Modeling

Automation Scripting

Infrastructure as Code

Compliance & Regulatory Knowledge

Cloud-native Security

Tools

Jenkins

GitHub Actions

GitLab CI

Azure DevOps

SonarQube

Checkmarx

Veracode

Snyk

Docker

Kubernetes

CycloneDX

SPDX

Terraform

Ansible

Job description

Quantum Technologies. LLC is seeking a Senior DevSecOps Lead to design and implement security-enabled CI/CD pipelines across our software platforms. You’ll integrate SAST/DAST/SCA tooling, secure coding practices, and threat modeling to reduce risk while speeding releases.

You will architect secure software supply chain processes, manage SBOMs (CycloneDX/SPDX), and drive automation with IaC and container security in cloud-native environments.