Senior DevSecOps Engineer - Remote, Vulnerability Management

CruiTek, LLC; United States; Remote; USD 160.000 - 230.000; Vollzeit

Zusammenfassung

CruiTek, LLC is seeking a very senior DevSecOps Engineer to establish and operationalize a vulnerability management program within GitLab. This client-facing position requires depth of hands-on experience and exceptional communication skills.

You will standardize security scanning, reduce false positives, automate dependency management, support SBOM generation, and document processes for long-term operational support.

Qualifikationen

• Hands-on GitLab CI/CD pipeline authoring.
• GitLab SAST, dependency scanning, container scanning, security policies, and vulnerability reporting experience.
• Experience building a vulnerability management program.
• Vulnerability triage processes.
• Remediation workflow development.
• Severity-based remediation timelines.
• Security exception management.
• SBOM generation.
• Dependency scanning.
• Container image scanning.
• Experience documenting operational processes and procedures.

Aufgaben

• Establish and operationalize a vulnerability management program within GitLab.
• Standardize security scanning across projects and reduce false positives.
• Build remediation workflows and automate dependency management.
• Document processes for long-term operational support.

Kenntnisse

GitLab CI/CD

GitLab security features

Vulnerability management

Vulnerability triage

Remediation workflows

Severity timelines

Security exception management

SBOM generation

Dependency scanning

Container image scanning

Operational documentation

Tools

Renovate

AWS ECS

Elixir/Hex

Node.js

Ruby

Lucee/CFML on JVM

CycloneDX SBOM

SPDX SBOM

SOC 2 audits support

Jobbeschreibung

CruiTek, LLC is seeking a very senior DevSecOps Engineer to establish and operationalize a vulnerability management program within GitLab. This client-facing position requires depth of hands-on experience and exceptional communication skills.

You will standardize security scanning, reduce false positives, automate dependency management, support SBOM generation, and document processes for long-term operational support.