Job Description
Job Summary
We are seeking a highly skilled DevSecOps Engineer with strong experience in security engineering and third‑party risk management, particularly with BitSight. The ideal candidate will integrate security practices into the DevOps lifecycle while leveraging BitSight to monitor, assess, and improve organizational cybersecurity posture.
Key Responsibilities
- Integrate security controls, tools, and processes into CI/CD pipelines.
- Manage and monitor security posture using the BitSight platform.
- Analyze BitSight security ratings and drive remediation activities.
- Collaborate with DevOps, infrastructure, and application teams to implement secure coding practices.
- Conduct vulnerability assessments, risk analysis, and security reviews.
- Automate security testing (SAST, DAST, SCA) within build pipelines.
- Monitor third‑party/vendor security risks and coordinate mitigation efforts.