DevSecOps Lead Engineer

People Consultancy Services (PCS); United States; On-site; USD 150,000 - 210,000; Full time

Job summary

People Consultancy Services (PCS) is seeking an experienced Application Security (AppSec) / DevSecOps Engineer with 10+ years in application and software security. The role emphasizes strong DevSecOps, SAST/SCA, CI/CD pipeline security, and secure software development practices.

The ideal candidate will have hands-on Checkmarx experience for source code scanning, vulnerability detection, and security analysis, and will secure CI/CD pipelines and SCM platforms across enterprise environments.

Qualifications

• 10+ years of experience in application and software security.
• Expertise in DevSecOps, SAST, SCA and CI/CD pipeline security.
• Experience securing enterprise CI/CD pipelines and SCM platforms.
• Knowledge of Secure Code Review and vulnerability remediation.
• Experience with Software Supply Chain Security and SDLC integration.

Responsibilities

• Collaborate with development, DevOps and security teams to identify, prioritize, remediate, and monitor vulnerabilities.
• Secure CI/CD pipelines and SCM platforms across enterprise environments.
• Provide secure code reviews and guidance on secure software development practices.
• Implement Software Supply Chain Security and integrate security controls throughout the SDLC.

Skills

DevSecOps

Secure coding practices

Vulnerability management

Tools

Checkmarx

Job description

Job Description

• Seeking an experienced Application Security (AppSec) / DevSecOps Engineer with 10+ years of experience in application and software security.
• Strong expertise in DevSecOps, SAST, SCA, CI/CD pipeline security, and secure software development practices.
• Hands-on experience with Checkmarx for source code scanning, vulnerability detection, and security analysis.
• Experience securing CI/CD pipelines and Source Code Management (SCM) platforms across enterprise environments.
• Strong knowledge of Secure Code Review, vulnerability assessment, remediation, and application security best practices.
• Experience implementing Software Supply Chain Security and integrating security controls throughout the SDLC.
• Collaborate with development, DevOps, and security teams to identify, prioritize, remediate, and continuously monitor application vulnerabilities.