Senior Information Protection Advisor – Product Security, DevSecOps

Jobtailor; Connecticut; On-site; USD 120,000 - 180,000; Full time

Job summary

Jobtailor seeks an experienced cybersecurity professional to partner with development teams and embed security across product delivery. You will design and implement automated security within CI/CD pipelines, strengthen posture with SAST/DAST/MAST, and influence secure architecture decisions.

Lead security assessments, threat modeling, and vulnerability analysis to proactively reduce risk. Drive DevSecOps maturity while aligning with regulatory requirements and promoting cross-functional

Qualifications

• 8+ years of cybersecurity experience focusing on application or product security.
• Experience integrating and automating security tools in CI/CD pipelines.
• Solid understanding of secure software development and modern SDLC.
• Hands-on with SAST/DAST/SCA/MAST.
• Experience securing cloud-native apps (AWS/Azure/GCP).
• Ability to influence and collaborate across engineering teams.
• Experience working in Agile environments.

Responsibilities

• Partner with development teams to embed security practices in delivery.
• Design and implement automated security in CI/CD pipelines to strengthen security posture.
• Integrate and optimize security testing tools across environments.
• Influence secure architecture decisions for modern applications and platforms.
• Lead security assessments, threat modeling, and vulnerability analysis to reduce risk.
• Develop and enhance reusable security services, tooling, and automation frameworks.
• Provide expert guidance on secure development practices and emerging trends.
• Promote a culture of shared security ownership across cross-functional teams.
• Ensure alignment with regulatory requirements (HIPAA, PCI-DSS, GDPR).
• Improve security operational efficiency, performance, and cost optimization.

Skills

Application security

CI/CD security integration

Secure SDLC

Agile collaboration

Threat modeling

Vulnerability analysis

Security tooling automation

Cloud security (AWS/Azure/GCP)

Secure architecture decisions

Tools

SAST

DAST

SCA

MAST

Job description

Responsibilities

• Partner with development teams to embed security practices that enable safe, scalable, and high-quality product delivery
• Design and implement automated security solutions within CI/CD pipelines to strengthen application security posture
• Integrate and optimize application security testing tools (SAST, DAST, SCA, MAST) across multiple development environments
• Influence secure architecture decisions by contributing to the design and implementation of modern applications and platforms
• Lead security assessments, threat modeling, and vulnerability analysis to proactively identify and reduce risk
• Develop and enhance reusable security services, tooling, and automation frameworks that support enterprise-wide DevSecOps maturity
• Provide expert guidance to engineering teams on secure development practices and emerging security trends
• Strengthen collaboration across cross-functional teams to promote a culture of shared security ownership
• Ensure alignment with regulatory and compliance requirements (e.g., HIPAA, PCI-DSS, GDPR) where applicable
• Improve security operational efficiency, performance, and cost optimization across application environments

Requirements

• 8+ years of experience in cybersecurity, with a focus on application or product security
• Proven experience integrating and automating security tools in CI/CD pipelines
• Strong understanding of secure software development principles and modern SDLC practices
• Hands-on experience with application security testing tools (SAST, DAST, SCA, MAST)
• Experience designing and implementing security solutions across complex development environments
• Familiarity with cloud platforms (AWS, Azure, or Google Cloud) and securing cloud-native applications
• Strong interpersonal skills with the ability to influence and collaborate across engineering teams
• Demonstrated ability to work effectively in Agile environments