Senior DevSecOps & Application Security Leader

Imprivata; Waltham (MA); Hybrid; USD 184,000 - 228,000; Full time

Job summary

Imprivata seeks a Sr. Manager, DevSecOps and Application Security to lead unified DevSecOps and application security across design to retirement, embedding security throughout the software lifecycle. The role partners with Engineering, Product, IT, Cloud, SecOps, GRC, and Architecture.

The role supports cloud, on‑premises, hybrid, API, and AI environments, guiding strategy, staffing, tooling, budgeting, and governance while maturing security practices and risk-based remediation.

Qualifications

• Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering, or equivalent practical experience.
• 7+ years in DevOps, cloud engineering, software engineering, app security, or related fields.
• 3+ years leading security engineering, DevSecOps, or AppSec teams across multiple products.
• Experience embedding security into CI/CD pipelines, cloud platforms, IaC, containers, Kubernetes, and CI/CD tools.

Responsibilities

• Lead, coach, and develop the DevSecOps and Application Security team.
• Oversee transition of DevSecOps into Security organization including operating model and governance.
• Own program strategy, roadmap, staffing plan, tooling, budget, and escalation paths.
• Establish security-by-design practices and threat modeling across SDLC.
• Mature app security through code reviews, testing, and vulnerability management.
• Implement and govern SAST, DAST, SCA, secrets detection, container security, and IaC scanning.
• Strengthen software supply-chain and platform security across repos, build systems, and cloud/infrastructure.
• Address security risks with agentic AI and partner with SecOps on incident response.
• Define ownership, remediation criteria, and executive reporting for security findings.

Skills

DevSecOps

Security leadership

CI/CD

Cloud engineering

Kubernetes

Git-based SCM

Automation scripting

Stakeholder communication

Education

Bachelor's degree in CS/IT/Cybersecurity or equivalent

Tools

GitHub Actions

GitLab

Jenkins

Job description

Imprivata seeks a Sr. Manager, DevSecOps and Application Security to lead unified DevSecOps and application security across design to retirement, embedding security throughout the software lifecycle. The role partners with Engineering, Product, IT, Cloud, SecOps, GRC, and Architecture.

The role supports cloud, on‑premises, hybrid, API, and AI environments, guiding strategy, staffing, tooling, budgeting, and governance while maturing security practices and risk-based remediation.