Lead AppSec & DevSecOps: Secure Cloud & Software

Mass Digital Health; Waltham (MA); Hybrid; USD 163,000 - 173,000; Full time

Job summary

Imprivata is seeking an AppSec and DevSecOps Lead to operationalize security across its product lines, engineering teams, and infrastructure. This role will embed security throughout the software lifecycle—from design and coding through testing, deployment, operations, and retirement.

The successful candidate will support cloud-native and traditional products deployed in customer-managed, on-premises, virtualized, and hybrid environments.

Qualifications

• Bachelor’s degree or equivalent in CS/IT/Cybersecurity.
• 7+ years in DevOps, cloud, software, or infrastructure security.
• 3+ years hands-on DevSecOps or security engineering experience.
• Experience integrating security into CI/CD workflows across environments.
• Proficiency with major cloud platforms and IaC tooling.

Responsibilities

• Execute DevSecOps strategy across products, cloud, data centers and software.
• Embed secure-by-design and policy-as-code in pipelines with risk-based gates.
• Secure Git workflows, build systems, secrets, SBOMs, and provenance.
• Apply IAM, authentication, authorization, and least privilege controls.
• Align with NIST CSF, CIS Controls, OWASP and healthcare requirements.

Skills

DevSecOps

Cloud security

CI/CD integration

Scripting (Python/Go/JS)

Security risk communication

Education

Bachelor’s degree in CS/IT/Cybersecurity

Tools

Git

GitHub Actions

GitLab

Jenkins

Kubernetes

Terraform

CloudFormation

Job description

Imprivata is seeking an AppSec and DevSecOps Lead to operationalize security across its product lines, engineering teams, and infrastructure. This role will embed security throughout the software lifecycle—from design and coding through testing, deployment, operations, and retirement.

The successful candidate will support cloud-native and traditional products deployed in customer-managed, on-premises, virtualized, and hybrid environments.