RemoteLeaf Logo
Log in Sign up

DevSecOps Lead

1 month ago
United States
Full-time
Lead
DevOps Engineer
DevOps and Infrastructure
CI/CD DevSecOps Git GitHub Actions Jenkins
Apply Now
YipitData

YipitData

YipitData specializes in market research for the disruptive economy by analyzing billions of data points daily to deliver accurate and timely insights on over 1,000 companies, aiding investors in making informed decisions and helping businesses enhance...

Professional Services
251-1K
Founded 2013
$492M raised
View All Jobs 18

Description

  • Own the roadmap for secure SDLC controls and partner with Engineering and Product to roll out practical, scalable, and auditable standards.
  • Develop and maintain secure development policies, implementation standards, and guidance for engineering teams.
  • Drive adoption of controls across repositories and pipelines, including branch protection, pull request requirements, code review, secrets scanning, dependency scanning, infrastructure-as-code scanning, and container image scanning.
  • Partner with Engineering and Product to integrate security guardrails into CI/CD workflows and developer tooling.
  • Support vulnerability management operations, including intake, triage, remediation tracking, verification, and reporting.
  • Build reference implementations, templates, and onboarding guidance to help teams adopt secure patterns consistently.
  • Define and report metrics such as control coverage, vulnerability aging, SLA performance, and remediation progress.
  • Prepare audit-ready documentation and evidence showing controls are implemented and operating effectively.
  • Evaluate and prioritize future improvements such as SAST, DAST, SBOM generation, image signing, and software supply chain security enhancements.

Requirements

  • 6+ years of experience in DevSecOps, security engineering, application security, cloud security, or DevOps, including leading cross-functional programs or technical initiatives.
  • Experience building or improving Secure SDLC, CI/CD security, or vulnerability management programs in modern engineering environments.
  • Understanding of Git-based workflows, CI/CD systems, cloud-native development, containers, and repository security controls.
  • Experience implementing or governing controls such as branch protection, code review, secrets scanning, SAST, SCA, infrastructure-as-code scanning, or container scanning.
  • Ability to translate security requirements into clear standards and practical implementation plans for engineering teams.
  • Comfort influencing stakeholders across Security, Engineering, and leadership.
  • Experience with GitHub Enterprise, GitHub Actions, Jenkins, or similar platforms, preferred.
  • Experience supporting SOC 2, audit readiness, or customer assurance efforts, preferred.
  • Familiarity with software supply chain security concepts such as SBOMs, image signing, and artifact integrity, preferred.
  • Cannot require current or future visa sponsorship.

Benefits

  • Competitive salary with annual base compensation up to $250k plus a 10% target variable.
  • Comprehensive benefits package.
  • Flexible work hours.
  • Flexible vacation.
  • Generous 401(k) match.
  • Parental leave.
  • Team events.
  • Wellness budget and learning reimbursement.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Torq

DevOps Engineer

Torq 51-250 Professional Services

Torq is hiring a DevOps Engineer to help build and operate its AI-native SecOps platform across production environments for security teams at Fortune 500 companies.

Israel Full-time Mid Level DevOps Engineer
Argo CD AWS Azure Bash CI/CD Docker GCP GitHub Actions GitLab Go Grafana Jenkins Kubernetes Microservices OpenTelemetry Prometheus Python Terraform
14 hours, 15 minutes ago
Raiffeisen Bank Ukraine

RASP Cyber Force | Професійна програма для ветеранів у сфері кібербезпеки

Raiffeisen Bank Ukraine 10K-50K Banks

Raiffeisen Bank’s RASP Cyber Force is a six-month cybersecurity development program for veterans and service members, combining training and part-time work in one of the bank’s information security teams.

Ukraine Part-time Entry Level Security Analyst Security Engineer
Cybersecurity Encryption Network Security Penetration Testing SOC
14 hours, 15 minutes ago
Resilient Co

SSR Data Platform Admin

Resilient Co 11-50 Professional Services

Resilient Co. is hiring a semi-senior Data Platform Admin to stabilize and scale a data platform through Terraform-driven infrastructure automation and hands-on operational support.

Chile Colombia Costa Rica Uruguay Mexico Argentina Brazil Contract Mid Level Database Administrator DevOps Engineer
CI/CD Databricks Python SQL Terraform
14 hours, 30 minutes ago
Lever

Senior Cryptocurrency Engineer

Lever 251-1K Professional Services

AnaVation is hiring a Senior Cryptocurrency Engineer to lead blockchain analysis and digital-asset investigations supporting federal cyber-enabled financial-crime and cryptocurrency cases.

United States Full-time Senior Blockchain Developer Security Engineer
Bitcoin Cybersecurity
14 hours, 30 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers