Role: DevSecOps Security Lead
Duration: 12 months (Possible extension)
Location: US (remote)
 
Role Summary
We are seeking a contract DevSecOps Security Lead to support CI/CD security initiatives across enterprise DevOps platforms, with a focus on pipeline security assessments and tooling validation. This role contributes to structured assessments of CI/CD pipelines against enterprise security requirements to improve control coverage and risk visibility, while supporting governance, findings management, and reporting. This is a hands-on, execution-focused role working with AppSec and Platform Engineering teams to drive scalable improvements across pipelines.
 
Opportunity
The DevSecOps Security team is expanding to accelerate CI/CD security capabilities across enterprise platforms. This contract role focuses on supporting tooling evaluations and executing pipeline security assessments. Key areas include validating pipelines against required controls, assessing high-usage pipelines, and reviewing standardized pipelines supporting Internet-facing applications.
 
Qualifications / Experience

• 5+ years in DevSecOps, Application Security, or related security engineering roles
• Hands-on experience assessing and securing CI/CD pipelines in enterprise environments – with a focus on workflow (YAML) review and assessment
• Strong understanding of secure software delivery practices (build, test, deploy lifecycle)
• Experience evaluating and validating security controls within DevOps workflows
• Familiarity with common CI/CD risks (e.g., dependency management, pipeline integrity, secrets handling, access controls)
• Experience conducting structured assessments and documenting findings, gaps, and remediation recommendations
• Exposure to security tooling evaluations, PoCs, or vendor assessments
• Ability to translate security requirements into practical pipeline controls and validation steps
• Experience working with platform engineering and development teams to validate findings and remediation feasibility
• Strong written communication skills with ability to produce audit-ready documentation and reporting

 
Nice to Have

• Experience supporting large-scale or federated DevOps environments
• Exposure to cloud-based pipeline architectures
• Familiarity with governance, risk, and compliance expectations in CI/CD environments
• Experience contributing to standardized pipeline definitions or patterns

 
 
At SPECTRAFORCE, we are committed to maintaining a workplace that ensures fair compensation and wage transparency in adherence with all applicable state and local laws. This position’s starting pay is: $ 80.00/hr.