DevSecOps Security Assessment Specialist

Apex Systems; Richmond (VA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical insurance

401K with company match

Health Savings Account (HSA)

Employee Assistance Program

Job summary

Everforth Apex is seeking an Information Security Advisor to advance DevSecOps, security assessments, and risk management across the software lifecycle. You will combine hands-on security engineering with advisory duties, partnering with engineering teams to automate controls and strengthen security posture.

Candidates should have experience in security automation, SAST/DAST, CI/CD, and cloud environments, plus strong communication to translate technical findings into business actions.

Qualifications

• Bachelor's degree in Information Security, Computer Science, Information Technology, or related field.
• 5+ years in information security, cybersecurity, risk management, audit, compliance, or related areas.
• Experience with security automation, monitoring, compliance, or analytics platforms.
• Relevant industry certifications preferred (e.g., CISSP, CISA, CRISC, Security+).

Responsibilities

• Evaluate security controls through automated data collection and evidence-based assessments.
• Analyze data to identify trends and potential control gaps.
• Support documentation and reporting of security risks across environments.
• Implement and maintain security testing capabilities within CI/CD pipelines.

Skills

Security assessments

DevSecOps

Risk management

Cloud security

SAST/DAST

CI/CD

Communication

Education

Bachelor's degree in Information Security, Computer Science, Information Technology

Tools

CI/CD platforms

IaC security scanning

Vulnerability management tools

Job description

Everforth Apex is seeking an Information Security Advisor to advance DevSecOps, security assessments, and risk management across the software lifecycle. You will combine hands-on security engineering with advisory duties, partnering with engineering teams to automate controls and strengthen security posture.

Candidates should have experience in security automation, SAST/DAST, CI/CD, and cloud environments, plus strong communication to translate technical findings into business actions.