Description

Lead security operations and drive DevSecOps integration across the platform.

This role is remote.

Responsibilities

• Lead security operations, focusing on threat identification and response.
• Implement and manage security monitoring tools and incident response procedures.
• Conduct vulnerability assessments and penetration testing to identify security weaknesses.
• Ensure platform compliance with internal security policies and external regulations.
• Implement and govern GitHub Advanced Security within pipelines, embedding DevSecOps practices.

Required Skills

• Minimum seven years of IT and IT security experience with a background in software security.
• Experience developing software using Agile and DevOps methods and tools.
• Deep understanding of attack vectors, current threats, and remediation strategies.
• Experience implementing and governing secure CI/CD and branch protections.
• Familiarity with embedding tooling like CodeQL code scanning, secret scanning, dependency/SCA, and IaC scanning.
• Experience documenting processes and reviewing or drafting technical architecture and cloud security architecture material.
• Ability to apply AI capabilities across ecosystems, designing secure AI workflows and guardrails.

Preferred Skills

• Professional privacy or security qualifications such as CIPP and/or CISSP.
• Experience with computer forensics practices, basic investigations, and evidence handling.
• Prior Azure experience.

Key Skills

Education

Any Graduate