Director of Application and DevSecOps Security
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Director of Application & DevSecOps Security leading secure software development practices at Gainwell Technologies. Collaborating across teams to ensure integrated security in development lifecycles.
Responsibilities:
- Define and lead the enterprise Application Security and DevSecOps strategy aligned to business objectives
- Build and mature a shift-left security program integrated into CI/CD pipelines
- Establish and implement roadmap for API security, including governance, discovery, and runtime protection
- Balance governance with enablement by establishing guardrails, reusable patterns, and self-service security tooling that empower engineering teams
- Lead, mentor, and grow a high-performing security engineering team
- Oversee secure coding practices, SAST/DAST/SCA tooling, and vulnerability management processes
- Define API security standards including authentication, authorization, rate limiting, and data protection
- Drive threat modeling practices across critical applications and services
- Partner with engineering and development teams to remediate risks and improve secure design patterns
- Embed automated security controls into CI/CD pipelines
- Champion developer-first security tooling and workflows
- Partner with DevOps teams to ensure secure infrastructure-as-code (IaC) practices
- Measure and improve security posture through pipeline metrics and KPIs
- Define and maintain secure SDLC policies, standards, and control frameworks
- Establish secure design and architecture requirements for new systems
- Ensure alignment with regulatory and compliance requirements (e.g., SOC 2, ISO 27001, NIST)
- Lead security reviews and design approvals for critical initiatives
- Design and implement role-based and just-in-time developer security training programs
- Build secure coding guidelines and internal knowledge resources
- Drive security awareness and culture across engineering teams
- Partner with leadership to ensure adoption and accountability
- Define KPIs and KRIs for application and DevSecOps security maturity
- Report on risk posture, vulnerabilities, and program effectiveness to executive leadership
- Continuously assess and improve tooling, processes, and coverage
Requirements:
- 10+ years of experience in cybersecurity with a strong focus on application security and DevSecOps
- 5+ years in a leadership or director-level role managing teams
- Deep expertise in secure SDLC, application security testing (SAST, DAST, SCA), and API security
- Experience integrating security into CI/CD pipelines and cloud-native environments (AWS, Azure, or GCP)
- Experience with container security, Kubernetes security, serverless security concepts and delivery
- Strong knowledge of modern architectures (microservices, containers, Kubernetes)
- Proven experience building security programs and influencing engineering culture
Benefits:
- flexible vacation policy
- educational assistance
- comprehensive health benefits
- 401(k) employer match
- leadership and technical development academies
Similar Jobs
DevOps Engineer
DevOps Engineer managing cloud environments and automation tools at RethinkFirst. Responsible for CI/CD pipeline and delivering quality code adhering to standards.
Junior Release Engineer
Junior Release Engineer for a remote gaming company, managing builds and coordinating releases. Focusing on mobile game production and quality assurance tasks in timeline-driven environment.
Senior Site Reliability Engineer
Senior Site Reliability Engineer at Order.co to ensure reliable and scalable software systems. Collaborate with the Platform team while maintaining operational efficiency and infrastructure excellence.
Senior Site Reliability Engineer Lead
Senior II Site Reliability Engineer Lead leveraging big data and network diagnostics at Akamai. Responsible for tuning system performance and managing features to improve global network stability.
Senior Cloud & DevOps Engineer, AWS
DevOps Engineer responsible for managing cloud infrastructures in AWS at Cloudary. Collaborating with technical teams to optimize performance and security standards.
Analista de Sistemas Júnior – SRE
Junior Systems Analyst focused on SRE practices at Minerva Foods. Learning to build and maintain resilient and scalable infrastructure for key business operations.
DevOps Engineer
DevOps Engineer at E.ON managing cloud infrastructure using Azure and implementing automation solutions. Collaborating with teams to ensure system stability and transparency in operations.
DevSecOps Security Analyst – MID
DevSecOps Security Analyst ensuring application security practices within development processes. Engaging with teams on secure coding and vulnerability management.
Senior DevOps Engineer
Senior DevOps Engineer working for an Australian client, involved in managing infrastructure and CI/CD pipeline. Seeking experienced candidates from the Philippines for a fully remote role.
DevOps Engineer
Cloud & AI Engineer working fully remote in Spain. 6 years experience required in DevOps and related technologies.
DevOps Developer, Python/Powershell
DevOps Developer responsible for infrastructure automation and deployments at IRIUM. Seeking candidates with advanced English and over 6 years of experience in related fields.
Staff Site Reliability Engineer
Staff Site Reliability Engineer managing production infrastructure across AWS and Azure for ScalePad. Fostering engineering culture and leading initiatives in reliability and developer experience.
Senior Site Reliability Engineer
Senior Site Reliability Engineer enhancing ScalePad's multi-cloud platform and developer experience. Involved in infrastructure operations across AWS and Azure while mentoring fellow engineers.
DevOps Engineer
DevOps Engineer supporting a cloud-based EGM management platform across complex infrastructures. Focusing on automation, CI/CD, and improving developer experience in a gaming technology environment.
DevSecOps Engineer
DevSecOps Engineer supports migration activities to CyberArk PAM for federal applications. Collaborates across technical teams, analyzing and documenting application credential usage and integration requirements.
Senior DevOps Engineer
Lead DevOps Engineer managing cloud-native infrastructure, specializing in Kubernetes and AWS EKS. Collaborate with teams to enhance platform reliability and automation in a remote-first environment.
DevOps, OpenShift Systems Engineer
DevOps Systems Engineer supporting NASA's enterprise business solutions modernization and transformation. Seeking a candidate with strong Kubernetes and OpenShift experience for diverse IT Infrastructure projects.
Site Reliability Engineer – SRE
Site Reliability Engineer focusing on reliability, automation, and scalable systems for Social Discovery Group. Seeking a proactive engineer to support diverse social discovery products.
Staff Site Reliability Engineer
Staff Site Reliability Engineer at SimSpace defining technical vision and leading architecture for a cyber range platform. Seeking experienced professional to address complex infrastructure challenges.
Platform – DevSecOps Lead
Platform / DevSecOps Lead delivering technical leadership for Air Force IT systems. Overseeing platform architecture and DevSecOps strategy while ensuring secure, automated system delivery.