DevSecOps Consultant

GlobalSource IT, Inc.; Houston (TX); Hybrid; USD 96,000 - 152,000; Full time

Job summary

GlobalSource IT, Inc. in the Greater Houston Area is seeking a senior DevSecOps Contractor to ensure security across the software lifecycle by defining standards, conducting assessments, identifying vulnerabilities, and embedding controls into development and deployment processes.

The role is full-time, hybrid with onsite work two days per week; the ideal candidate has 7+ years of experience in application and security, strong Azure expertise, and the ability to work with developers to remediate

Qualifications

• 7+ years of relevant experience in security, DevSecOps, development, or network security.
• Hands-on Azure experience with application environments and resource groups.
• Experience with security testing and vulnerability remediation practices.
• Familiarity with security frameworks such as NIST or SOC 2 and secure SDLC processes.

Responsibilities

• Define security standards and embed security controls across the software lifecycle.
• Conduct assessments, testing, and vulnerability identification.
• Coordinate with internal teams and external partners to resolve risks.
• Evaluate third-party applications and tools for risk.
• Maintain documentation for compliance and continuous improvement.

Skills

Application security

DevSecOps

Vulnerability management

Secure coding

Tools

Azure

Job description

Note: GlobalSource IT is not considering any 3rd party submittals at this time. Only those in the Greater Houston Area will be considered for the position.

GlobalSource IT has a direct client opportunity for a senior-level DevSecOps Contractor in the Greater Houston Area to assist with ensuring applications are secure throughout their entire lifecycle by defining security standards, conducting assessments and testing, identifying vulnerabilities, and integrating security controls into development and deployment processes. You will also coordinate with internal teams and external partners to resolve security risks, evaluate third-party applications and tools, and maintain documentation for compliance and continuous improvement.

This is a full-time, hybrid opportunity requiring approximately 40 hours per week, with on-site work two days per week.

The ideal candidate will have:

• Approximately 7+ years of relevant experience spanning application security, DevSecOps, development, or network security.
• Strong hands-on Azure experience, particularly application environments and resource groups.
• Understanding software development and security vulnerabilities.
• Experience implementing or supporting application security scanning platforms.
• Ability to work directly with developers to resolve vulnerabilities.
• Ability to operate independently and take ownership.

The ideal candidate has hands-on DevSecOps and application security experience, including security testing, secure coding, and integrating security controls throughout the software development lifecycle. They should also have experience with Microsoft Azure, multiple programming languages, third-party software risk assessments, security frameworks such as NIST or SOC 2, and established business process methodologies.