Remote DevSecOps & Supply Chain Security Consultant

Rivago Infotech Inc; Tewksbury (MA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Rivago Infotech Inc in the United States is seeking a DevSecOps & Supply Chain Security Consultant to assess software supply chain security, SBOM governance, and CI/CD controls across development and deployment environments.

You will review SDLC practices, vulnerability management, secrets handling, and release governance while mapping compliance evidence and providing remediation guidance to stakeholders.

Qualifications

• Strong DevSecOps and secure software delivery expertise.
• Experience with CycloneDX/ SPDX SBOMs and SCA tooling.
• Familiarity with CI/CD security controls and artifact validation.

Responsibilities

• Review SDLC processes and secure development practices.
• Assess software supply chain security including SBOM accuracy and dependency governance.
• Evaluate CI/CD pipeline security and artifact integrity.
• Review secrets management across environments.
• Assess logging, auditability, and security event traceability.
• Evaluate vulnerability management and patch governance.
• Support lifecycle security assessment and traceability.
• Contribute to assessment reporting and remediation guidance.
• Participate in release governance reviews.

Skills

DevSecOps

SBOM frameworks

SCA tooling

CI/CD security

Vulnerability management

Dependency governance

Auditability

Secrets management

Release governance

Lifecycle security

Tools

CycloneDX

SPDX

CI/CD tooling

Vulnerability scanners

Job description

Rivago Infotech Inc in the United States is seeking a DevSecOps & Supply Chain Security Consultant to assess software supply chain security, SBOM governance, and CI/CD controls across development and deployment environments.

You will review SDLC practices, vulnerability management, secrets handling, and release governance while mapping compliance evidence and providing remediation guidance to stakeholders.