DevSecOps Lead

UniQtal Solutions LLC; New York (NY); Remote; USD 140,000 - 190,000; Full time

Job summary

UniQtal Solutions LLC is seeking a DevSecOps Lead to drive application security across modern SDLCs. This fully remote role requires 10+ years of experience and hands-on expertise with SAST, SCA, and secure code reviews.

You will collaborate with development teams to integrate security into GitHub, GitLab, Azure DevOps, and Jenkins pipelines. The ideal candidate will onboard applications to Checkmarx, configure scans, and lead remediation efforts while expanding security practices beyond

Qualifications

• 10+ years of hands-on security-focused DevSecOps experience.
• Deep expertise in application security testing and secure software development.
• Proven ability to integrate security into CI/CD pipelines.

Responsibilities

• Integrate security controls and scanning in SDLC and CI/CD pipelines.
• Onboard applications to security scanning like Checkmarx across GitHub, GitLab, ADO, Jenkins.
• Configure and run SAST/SCA scans; establish recurring scanning schedules.
• Review scan results, assist remediation, and integrate findings into development workflows.
• Provide hands-on app security expertise beyond tooling; review code and open-source risks.
• Collaborate with development teams to close security gaps and ensure trusted components.

Skills

Application Security

DevSecOps

SAST

SCA

Checkmarx

CI/CD Pipeline Security

Source Code Management Platforms

Secure Code Review

Vulnerability Management

Software Supply Chain Security

Tools

GitHub

GitLab

Azure DevOps

Jenkins

Job description

DevSecOps Lead

100% Remote

W2 Candidates only

Minimum Experience: 10+ Years

Must have required skills:

Application Security (AppSec)

DevSecOps

SAST (Static Application Security Testing)

SCA (Software Composition Analysis)

Checkmarx

CI/CD Pipeline Security

Source Code Management Platforms

Secure Code Review

Vulnerability Management & Remediation

Software Supply Chain Security

Other Details of Role:

• The Application Security / DevSecOps Engineer will support the client's enterprise Application Security program by integrating security controls and scanning capabilities throughout the software development lifecycle and CI/CD pipelines.
• The resource will work across multiple source code management and DevOps platforms, including GitHub, GitLab, Azure DevOps (ADO), and Jenkins, and will be responsible for onboarding applications into security scanning solutions such as Checkmarx.
• Responsibilities include configuring and executing SAST and SCA scans, establishing recurring scanning schedules, reviewing and analyzing scan results, supporting remediation of identified vulnerabilities, and integrating security findings with the appropriate development and security workflows.
• The resource should also provide hands‑on application security expertise beyond automated tooling, including secure code review, identification of coding and validation weaknesses, review of third‑party and open-source libraries/packages, and assessment of software supply‑chain risks.
• The individual will work closely with application and development teams to identify security gaps, provide remediation guidance, and help ensure that applications consume trusted and secure software components