Remote DevSecOps Lead — Secure Software Supply Chain

AptaChem Consulting LLC; United States; Remote; USD 131,000 - 187,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Life insurance

Disability insurance

401(k) match

Career development

Job summary

Paylocity is seeking a highly motivated DevSecOps Manager to lead the evolution of secure software engineering across the organization. This role emphasizes secure-by-design practices, software supply chain security, and automation to ensure secure delivery at scale.

You will partner with Product Development, Platform, Architecture, Information Security, GRC, and other teams to implement pragmatic guardrails, reduce risk, and drive measurable security outcomes across cloud-native, SaaS

Qualifications

• 5+ years in application security, DevSecOps, product security, or related info security.
• 2+ years people management experience.
• Experience leading security engineering initiatives with cross-functional outcomes.

Responsibilities

• Lead and mentor the DevSecOps team and define the roadmap for application security and software supply chain security.
• Drive secure-by-design practices through threat modeling, architecture/design reviews, and reusable security patterns.
• Standardize trusted, minimal container images and secure base components; adopt Chainguard where appropriate.
• Establish software provenance controls: SBOMs, signing, attestations, and verification across build/deploy workflows.
• Embed automated security controls into CI/CD and developer workflows; secure GitHub Actions at scale with hardened workflows.

Skills

DevSecOps

Team leadership

Threat modeling

CI/CD security

SBOMs

GitHub Actions

Secure-by-design

Cloud/SaaS

SAST/SCA

Security automation

Education

Bachelor's in Information Security

Security certifications

Tools

Chainguard

GitHub Actions tooling

Job description

Paylocity is seeking a highly motivated DevSecOps Manager to lead the evolution of secure software engineering across the organization. This role emphasizes secure-by-design practices, software supply chain security, and automation to ensure secure delivery at scale.

You will partner with Product Development, Platform, Architecture, Information Security, GRC, and other teams to implement pragmatic guardrails, reduce risk, and drive measurable security outcomes across cloud-native, SaaS