Senior DevSecOps & AppSec Leader

Imprivata; Saint Petersburg (FL); Hybrid; USD 184,000 - 228,000; Full time

Job summary

Imprivata seeks a Sr. Manager for DevSecOps and Application Security to lead a unified security function across cloud, on-prem, and hybrid environments. You will embed security throughout the software lifecycle and partner with Engineering, IT, and SecOps to mature security practices.

The role requires guiding a team, shaping the program strategy, and ensuring risk-based remediation while working across multiple products and stakeholders in a hybrid office setup.

Qualifications

• Bachelor's degree or equivalent practical experience in a relevant field.
• 7+ years in DevOps, cloud, software engineering, or security.
• 3+ years leading security engineering or AppSec teams across multiple products.
• Experience embedding security into CI/CD pipelines and cloud platforms.
• Experience with SAST/DAST/SCA and vulnerability management.
• Strong scripting or programming and knowledge of IAM, encryption, and secure design.

Responsibilities

• Lead DevSecOps and AppSec team with goals, performance, and development.
• Transition DevSecOps into Security organization with governance and tooling.
• Own program strategy, roadmap, budgets, and vendor relationships.
• Establish security-by-design, threat modeling, and policy-as-code practices.
• Mature secure software lifecycle practices including testing and remediation.
• Govern SAST/DAST/CI tooling and supply-chain security across platforms.
• Collaborate with SecOps on monitoring and incident response.
• Provide executive reporting and metrics on security findings.

Skills

CI/CD security

SAST/DAST/SCA

Cloud security

Kubernetes

IAM & encryption

Education

Bachelor's degree in Computer Science, IT, Cybersecurity, Engineering

Tools

GitHub Actions

GitLab

Jenkins

Jira

ServiceNow

Job description

Imprivata seeks a Sr. Manager for DevSecOps and Application Security to lead a unified security function across cloud, on-prem, and hybrid environments. You will embed security throughout the software lifecycle and partner with Engineering, IT, and SecOps to mature security practices.

The role requires guiding a team, shaping the program strategy, and ensuring risk-based remediation while working across multiple products and stakeholders in a hybrid office setup.