Description

Role purpose

• Lead secure SDLC implementation across platforms by embedding security controls, automation and evidence into application delivery pipelines.

Key responsibilities

• Define and lead the secure SDLC operating model, standards and reusable pipeline patterns.

• Embed code, dependency, secret, container, API and infrastructure-as-code checks into CI/CD.

• Set remediation gates, exception workflows and release-compliance controls.

• Coordinate platform engineers, application owners, cyber teams and governance stakeholders.

• Measure secure SDLC adoption, vulnerability reduction and release compliance.

• Maintain operational runbooks, control evidence and continuous-improvement plans.

Required skills

• DevSecOps and secure SDLC leadership

• CI/CD security and policy-as-code

• Cloud-native platforms and Kubernetes

• SAST, DAST, SCA, secrets and IaC security

• Security control evidence and governance reporting

• Stakeholder and delivery leadership

Key deliverables

• Secure SDLC standards and reusable pipeline controls

• Adoption and compliance dashboards

• Risk-based release gates and tracked remediation outcomes

Certifications

• CISSP, CCSP, cloud security or DevSecOps certification desirable

Preferred tools / platforms

• GitHub/Azure DevOps/Jenkins

• SonarQube and Snyk or equivalents

• Kubernetes

• Terraform

• OPA/policy-as-code

• Power BI

Key Skills

Education

Any Graduate