Remote Cybersecurity Engineer — DevSecOps & Secure SDLC

Scopic, Inc.; United States; Remote; USD 83,000 - 124,000; Part time

Benefits offered by this job

Paid training

Remote work flexibility

Flexible schedule

Job summary

Scopic is a world‑class remote company seeking a hands‑on Security Lead to integrate security into our secure development lifecycle across repositories, pipelines and cloud accounts.

You will configure tools, fix and harden systems, write policies and run sessions with engineers, while guiding the team toward ISO/IEC 27001 readiness and gradual day‑to‑day ownership. This is a part‑time, hourly role; experience with OWASP ASVS and threat modeling is valued.

Qualifications

• 8+ years of information security with hands-on work in application security, DevSecOps or cloud security
• Able to configure security tools, write pipeline configurations, review code and write policies
• Experience building secure development lifecycle and integrating security into CI/CD pipelines
• Good knowledge of cloud security in AWS, Azure or GCP
• Ability to explain risks to engineers and management clearly
• Fluent English, written and spoken
• Kubernetes and container security experience
• Knowledge of security risks in AI/LLM apps

Responsibilities

• Run security maturity assessment and turn findings into a roadmap
• Write core security policies and procedures (access control, secure development, incident response)
• Set up and maintain security backlog, risk register and metrics
• Configure and enforce SSO/MFA across email, Git hosting, cloud consoles and CI/CD
• Hardening Passbolt and implement a secrets manager
• Create Secure SDLC based on OWASP ASVS/SAMM
• Configure SecOps platform to reduce false positives and set up quality gates
• Perform security code reviews and internal security testing before releases

Skills

Security tool configuration

CI/CD security integration

Cloud security (AWS/Azure/GCP)

Threat modeling

Security code reviews

ISO 27001 familiarity

Fluent English

Tools

Passbolt

SSO & MFA tooling

OWASP ASVS

Job description

Scopic is a world‑class remote company seeking a hands‑on Security Lead to integrate security into our secure development lifecycle across repositories, pipelines and cloud accounts.

You will configure tools, fix and harden systems, write policies and run sessions with engineers, while guiding the team toward ISO/IEC 27001 readiness and gradual day‑to‑day ownership. This is a part‑time, hourly role; experience with OWASP ASVS and threat modeling is valued.