Our client is an international IT company seeking an experienced Senior DevSecOps and Vulnerability Management Engineer to strengthen security practices across its development pipelines, cloud infrastructure, and vulnerability management processes.
The client is building a dedicated security team for a US-based SaaS provider whose platform serves hundreds of public-sector agencies across North America. The programme covers a large, varied estate of around a dozen product lines, running on Java, .NET, Node/TypeScript, Ruby and PHP across Azure and AWS, including legacy systems that need framework upgrades rather than quick patches. The work starts with a short phase where senior engineers do threat modelling and map the estate. A larger team then fixes vulnerabilities, hardens cloud infrastructure, builds security gates into CI/CD pipelines and consolidates identity services. Engineers work hands-on with modern AI coding tools and learn security from experienced tower leads. It’s a strong fit for good software, cloud and DevOps engineers who want to grow into application security. The team works in English, with partial overlap with US Eastern time.
The Project
The project focuses on establishing a centralized, risk-based vulnerability management framework, integrating automated security checks into CI/CD pipelines, and improving the accuracy and transparency of security reporting.
The engagement consists of two phases. During Phase 1, the engineer will lead vulnerability management improvements and DevSecOps security integration. In Phase 2, the role will transition into a leadership position within the client's DevOps team, overseeing cloud and infrastructure engineers and a vulnerability management analyst.
