Remote DevSecOps Lead - Secure Software & Supply Chains

Teamtalentus; United States; Remoto; USD 131.000 - 187.000; Tempo pieno

Vantaggi offerti da questo lavoro

Medical insurance

Dental insurance

Vision insurance

Life insurance

Disability insurance

401(k) match

Descrizione del lavoro

Paylocity is seeking a highly motivated DevSecOps Manager to lead secure software engineering, focusing on secure-by-design, software supply chain integrity, and automation. You will guide a team across Product Development, Platform, Architecture, and GRC, driving guardrails that enable secure delivery at scale.

The role emphasizes trusted dependencies, SBOMs, artifact signing, and policy guardrails in CI/CD, with an on-going push to reduce vulnerabilities and improve security posture across the

Competenze

• 5+ years of experience in application security, DevSecOps, product security, or a related information security discipline.
• 2+ years people management experience.
• Experience leading security engineering initiatives and mentoring engineers.
• Strong knowledge of secure software development and SSDF.
• Hands-on CI/CD security integration; GitHub Actions experience preferred.
• Experience with software supply chain concepts including SBOMs, attestations, provenance.
• Experience with cloud, SaaS, containerized, and Agile/DevOps environments.

Mansioni

• Lead and mentor the DevSecOps team and define the roadmap for application security and software supply chain security.
• Drive secure-by-design practices through threat modeling, architecture reviews, and reusable security patterns.
• Advance software hardening with trusted container images and secure base components.
• Establish SBOMs, signing, attestations, and verification across build and deployment workflows.
• Embed automated security controls into CI/CD and developer workflows, securing GitHub Actions at scale.
• Partner with engineering to reduce vulnerabilities and risk through automation and secure defaults.
• Define metrics for secure-development adoption and supply chain integrity.

Conoscenze

DevSecOps leadership

Threat modeling

CI/CD security

Cloud/SaaS security

Security tooling

Strumenti

GitHub Actions

Chainguard

SAST

SCA

SBOM tooling

Descrizione del lavoro

Paylocity is seeking a highly motivated DevSecOps Manager to lead secure software engineering, focusing on secure-by-design, software supply chain integrity, and automation. You will guide a team across Product Development, Platform, Architecture, and GRC, driving guardrails that enable secure delivery at scale.

The role emphasizes trusted dependencies, SBOMs, artifact signing, and policy guardrails in CI/CD, with an on-going push to reduce vulnerabilities and improve security posture across the