Remote DevSecOps Security Strategist

Stefanini Group; Richmond (VA); Remote; USD 131,000 - 138,000; Full time

Job summary

Stefanini Group is seeking a DevSecOps Security Advisor to drive secure-by-design practices across pipelines and automate evidence collection within CI/CD. You’ll partner with engineering, automate risk reporting, and deliver actionable insights to leadership.

The role requires 5–7 years in information security, hands-on SAST/DAST, IaC checks, and experience with cloud platforms (AWS/Azure). This is a remote, long-term W2 opportunity in the United States.

Qualifications

• Bachelor's degree in Information Security, Computer Science, or a related field.
• 5-7 years of experience in information security, risk management, audit, or cyber operations.
• Advanced knowledge of security principles, assessment methodologies, and cloud environments (AWS/Azure).
• Hands-on experience with automation platforms, continuous monitoring tools, and analytics technologies.
• Strong analytical, communication, facilitation, and negotiation skills.

Responsibilities

• Embed secure-by-design practices across DevSecOps pipelines.
• Assess automation opportunities, build and integrate security automation, and deliver data-driven risk insights.
• Design, build, and operationalize AI agents for evidence triage, control mapping, and developer support.
• Enforce secure prompt and skill management, RBAC, and audit trails.
• Map automated controls and agent workflows to NIST SP 800-53 Rev 5 and FedRAMP.

Skills

Analytical skills

Communication skills

Facilitation

Negotiation

Education

Bachelor's degree in Information Security or Computer Science

Tools

Automation platforms

CI/CD pipelines

SAST/DAST tooling

IaC tooling

Job description

Stefanini Group is seeking a DevSecOps Security Advisor to drive secure-by-design practices across pipelines and automate evidence collection within CI/CD. You’ll partner with engineering, automate risk reporting, and deliver actionable insights to leadership.

The role requires 5–7 years in information security, hands-on SAST/DAST, IaC checks, and experience with cloud platforms (AWS/Azure). This is a remote, long-term W2 opportunity in the United States.